SnapCenter Vulnerability Check: MySQL 8.0X CVEs Flagged by Security Scanner
Applies to
- SnapCenter Server 6.X [SC]
- MySQL version 8.0.X (version will vary depending on the SnapCenter version)
Issue
- Security scanners might flag multiple MySQL CVEs on a host running SnapCenter Server 6.X. The scanner can report vulnerabilities including, but not limited to:
- CVE-2025-6965
- CVE-2026-21929
- CVE-2025-21937
- CVE-2025-21948
- CVE-2025-21949
- CVE-2025-21968
- CVE-2025-21936
- CVE-2025-21964
- CVE-2025-21965
- CVE-2025-21952
- CVE-2025-21941
- CVE-2025-21950
- CVE-2025-9230
- Log output from the affected SC sever host:
PSC:\\Windows\\system32> Get-Service | Where-Object { $_.Name -like "*mysql*" -or $_.DisplayName -like "*mysql*" }Status Name DisplayName------- ---- -----------Running MySQL57 MySQL57PSC:\\Windows\\system32> sc.exe qc MySQL57SERVICE_NAME: MySQL57BINARY_PATH_NAME: "C:\\Program Files\\MySQL\\MySQL Server 8.0\\bin\\mysqld.exe" --defaults-file="C:\\ProgramData\\NetApp\\SnapCenter\\MySQLData\\my.ini"