Skip to content

Percona vulnerabilities

Products

Newest

percona monitoring and management An issue was discovered in Percona PMM before 3.7. Because an internal database user retains... CVE-2026-25212 Public exploit 9.9 CriticalApril 2, 2026
percona monitoring and management An issue was discovered in Percona PMM Server (OVA) before 3.0.0-1.ova. The default service... CVE-2025-26701 10.0 CriticalMarch 11, 2025
percona percona-toolkit, toolkit +1 more Misuse of SHA256 to create an encryption key CVE-2024-7701 Fix available 5.1 MediumDecember 15, 2024
percona xtrabackup In Percona XtraBackup (PXB) through 2.2.24 and 3.x through 8.0.27-19, a crafted filename on the... CVE-2022-25834 Fix available 7.8 HighJune 7, 2023
percona monitoring and management In Percona Monitoring and Management (PMM) server 2.x before 2.37.1, the authenticate function in... CVE-2023-34409 9.8 CriticalJune 6, 2023
percona server An issue in the fetch_step function in Percona Server for MySQL v8.0.28-19 allows attackers to... CVE-2022-34968 7.5 HighAugust 3, 2022
percona xtrabackup Percona XtraBackup 2.4.20 unintentionally writes the command line to any resulting backup file... CVE-2022-26944 6.5 MediumJune 2, 2022
galeracluster wsrep, mariadb, percona server +1 more +3 more A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28,... CVE-2021-27928 Public exploitFix available EPSS 38.4% 7.2 HighMarch 19, 2021
percona server An issue was discovered in the MongoDB Simple LDAP plugin through 2020-10-02 for Percona Server... CVE-2020-26542 9.8 CriticalNovember 9, 2020
mariadb, debian linux, galeracluster galera cluster for mysql +1 more +3 more Important: mariadb:10.3 security, bug fix, and enhancement update CVE-2020-15180 Fix available 9.0 CriticalOctober 13, 2020
percona xtradb cluster An issue was discovered in Percona XtraDB Cluster before 5.7.28-31.42. A bundled script... CVE-2020-10996 8.1 HighApril 27, 2020
percona xtrabackup Percona XtraBackup before 2.4.20 unintentionally writes the command line to any resulting backup... CVE-2020-10997 Fix available 6.5 MediumApril 27, 2020
percona monitoring and management pmm-server in Percona Monitoring and Management (PMM) 2.2.x before 2.2.1 allows unauthenticated... CVE-2020-7920 7.5 HighFebruary 6, 2020
percona server The Percona Server 5.6.44-85.0-1 packages for Debian and Ubuntu suffered an issue where the... CVE-2019-12301 9.8 CriticalMay 23, 2019
mariadb, percona xtradb cluster, fedoraproject fedora +2 more sql/event_data_objects.cc in MariaDB before 10.1.30 and 10.2.x before 10.2.10 and Percona XtraDB... CVE-2017-15365 Fix available 8.8 HighJanuary 19, 2018
percona toolkit, xtrabackup +1 more The version checking subroutine in percona-toolkit before 2.2.13 and xtrabackup before 2.2.9 was... CVE-2015-1027 Fix available 5.9 MediumSeptember 28, 2017
percona toolkit The automatic version check functionality in the tools in Percona Toolkit 2.1 allows man-in-the... CVE-2014-2029 Fix available 8.1 HighSeptember 28, 2017
percona xtrabackup, fedoraproject fedora, opensuse leap +2 more xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the... CVE-2016-6225 Fix available 5.9 MediumMarch 23, 2017
mariadb, oracle mysql, percona server +1 more +3 more mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14;... CVE-2016-6664 Public exploitFix available 7.0 HighDecember 13, 2016
mariadb, oracle mysql, percona server +1 more +3 more Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x... CVE-2016-6663 Public exploitFix available 7.0 HighNovember 9, 2016
mariadb, oracle mysql, percona server +9 more +11 more Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5... CVE-2016-6662 Public exploitFix available EPSS 67.7% 9.8 CriticalSeptember 12, 2016
percona xtrabackup, opensuse +1 more Percona XtraBackup before 2.1.6 uses a constant string for the initialization vector (IV), which... CVE-2013-6394 2.1 LowDecember 13, 2013