CVE catalog
CVE-2025-30706
UBUNTU-CVE-2025-30706
- Severity
- High · CVSS 7.5
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 0.62% · Oct 25, 2026
This update for mysql-connector-java fixes the following issues: - Upgrade to Version 9.3.0 - CVE-2025-30706: Fixed Connector/J vulnerability (bsc#1241693) - Updatable ResultSet fails with 'Parameter index out of range'. - Fixed Resultset UPDATE methods not checking validity of ResultSet. - DatabaseMetaData clean up. - Fixed implement missing methods in DatabaseMetaDataUsingInfoSchema. - Fixed procedure execution failing when the parameter name contains escape character. - Fixed allow only Krb5LoginModule in Kerberos authentication. - Fixed EXECUTE on CallableStatement resulting in ArrayIndexOutOfBoundsException. - Mysql connector use an uneffective way to match numericValue. - Fixed parameter index validation not proper in CallableStatement
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Opensuse | mysql-connector-java | leap 16.0 | 9.3.0-160000.1.1 | fixed |
| Suse | mysql-connector-java | linux enterprise server 16.0 | 9.3.0-160000.1.1 | fixed |
| Suse | mysql-connector-java | linux enterprise server for sap applications 16.0 | 9.3.0-160000.1.1 | fixed |
| Opensuse | mysql-connector-java | tumbleweed | 9.3.0-1.1 | fixed |
| Ubuntu | mysql-connector-java | 14.04 | 5.1.25-1 | vulnerable |
| Ubuntu | mysql-connector-java | 14.04 | 5.1.26-1 | vulnerable |
| Ubuntu | mysql-connector-java | 14.04 | 5.1.27-1 | vulnerable |
| Ubuntu | mysql-connector-java | 14.04 | 5.1.28-1 | vulnerable |
| Ubuntu | mysql-connector-java | 16.04 | 5.1.32-1 | vulnerable |
| Ubuntu | mysql-connector-java | 16.04 | 5.1.38-1 | vulnerable |
| Ubuntu | mysql-connector-java | 18.04 | 5.1.42-1 | vulnerable |
| Ubuntu | mysql-connector-java | 18.04 | 5.1.44-1 | vulnerable |
| Ubuntu | mysql-connector-java | 18.04 | 5.1.45-1 | vulnerable |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Opensuse | mysql-connector-java | rpm | leap 16.0 | 9.3.0-160000.1.1 | Not reported | OPENSUSE-SU-2025:20089-1 | Not reported |
| Suse | mysql-connector-java | rpm | linux enterprise server 16.0 | 9.3.0-160000.1.1 | Not reported | SUSE-SU-2025:21144-1 | Not reported |
| Suse | mysql-connector-java | rpm | linux enterprise server for sap applications 16.0 | 9.3.0-160000.1.1 | Not reported | SUSE-SU-2025:21144-1 | Not reported |
| Opensuse | mysql-connector-java | rpm | tumbleweed | 9.3.0-1.1 | Not reported | OPENSUSE-SU-2025:15026-1 | Not reported |
OpenFactory catalog packages
[openSUSE Tumbleweed]
- [mysql-connector-java]Fixed
Source package: [mysql-connector-java]
Details (1)
9.3.0-2.6· noarch · tumbleweedFixed · Fixed:
9.3.0-1.1pypi · mysql-connector-java · opensuse · tumbleweed
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_21144-1.json]
- [https://osv.dev/vulnerability/SUSE-SU-2025:21144-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2025-30706]
- [https://osv.dev/vulnerability/openSUSE-SU-2025:15026-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2025:20089-1]
- [https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-30706.json]
[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]