Medium [CVE-2025-50077 +21] July 2025 MySQL Vulnerabilities in NetApp Products
This medium-severity NetApp advisory covers CVE-2025-50077 and CVE-2025-50078 and 20 more CVEs affecting Active IQ Unified Manager for Microsoft Windows, Active IQ Unified Manager for VMware vSphere, OnCommand Insight.
Aggregated and source-linked by VulniPulse. Data sources, validation and limitations. This bulletin covers 22 CVEs; its score, affected versions and guidance may apply to different issues within that bulletin.
VulniPulse record published Record updated
Android app · Google Play
Monitor future NetApp CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Summary
Multiple NetApp products incorporate MySQL Server.
MySQL Server versions 8.0.0 through 8.0.42, 8.4.0 through 8.4.5, and 9.0.0 through 9.3.0 are susceptible to vulnerabilities which when successfully exploited could allow privileged and unauthenticated attackers with network access via multiple protocols or a high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server.
Refer to “Oracle Critical Patch Update Advisory - July 2025” for additional details.
Successful attacks of these vulnerabilities can result in unauthorized ability to cause a partial denial of service (partial Dos), complete denial of service (complete DOS), or unauthorized creation, deletion or modification access to critical data or all MySQL Server accessible data.
Affected products: Active IQ Unified Manager for Microsoft Windows, Active IQ Unified Manager for VMware vSphere, OnCommand Insight, SnapCenter. NetApp reports that one or more additional products remain under investigation; review the canonical advisory for current status.
- 8.0.0
- 8.0.42
- 8.4.0
- 8.4.5
- 9.0.0
- 9.3.0
Official advisory · high-confidence parse· fetched 20 days ago·verify at source
- Active IQ Unified Manager for Microsoft Windows: 9.18
- Active IQ Unified Manager for VMware vSphere: 9.18
Official advisory · high-confidence parse· fetched 20 days ago·verify at source
Mitigation checklist
- Update affected NetApp products to a fixed release: Active IQ Unified Manager for Microsoft Windows: 9.18, Active IQ Unified Manager for VMware vSphere: 9.18.
- Full Support versions of SnapCenter Server allow MySQL software to be upgraded within documented constraints. Consult the product documentation for supported MySQL versions and other information related to the upgrade. <br><br> In Full Support versions of OnCommand Insight the MySQL software can be upgraded after acquiring updated OnCommand Insight binaries via technical support.
Official advisory · high-confidence parse· fetched 20 days ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.