Security Advisory

CVE-2025-8107

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-07-24 07:12:13
Last updated 2025-07-31 09:10:09
Assigner OB
CVSS score 6.3
State PUBLISHED

Description

In OceanBase's Oracle tenant mode, a malicious user with specific privileges can achieve privilege escalation to SYS-level access by executing carefully crafted commands. This vulnerability only affects OceanBase tenants in Oracle mode. Tenants in MySQL mode are unaffected.