Mongodb Inc Mongodb Server vulnerabilities
82 known vulnerabilities affecting mongodb_inc/mongodb_server.
Total CVEs
82
CISA KEV
1
actively exploited
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL3HIGH29MEDIUM50
Vulnerabilities
Page 5 of 5
CVE-2018-25004P4MEDIUMCVSS 4.9≥ 3.6, < 3.6.11≥ 4.0, < 4.0.62021-03-01
CVE-2018-25004 [MEDIUM] CWE-20 CVE-2018-25004: A user authorized to performing a specific type of query may trigger a denial of service by issuing
A user authorized to performing a specific type of query may trigger a denial of service by issuing a generic explain command on a find query. This issue affects MongoDB Server v4.0 versions prior to 4.0.6 and MongoDB Server v3.6 versions prior to 3.6.11.
nvd
CVE-2019-2389P4MEDIUMCVSS 4.2≥ 4.0, < 4.0.11≥ 3.6, < 3.6.14+1 more2019-08-30
CVE-2019-2389 [MEDIUM] CWE-732 CVE-2019-2389: Incorrect scoping of kill operations in MongoDB Server's packaged SysV init scripts allow users with
Incorrect scoping of kill operations in MongoDB Server's packaged SysV init scripts allow users with write access to the PID file to insert arbitrary PIDs to be killed when the root user stops the MongoDB process via SysV init. This issue affects MongoDB Server v4.0 versions prior to 4.0.11; MongoDB Server v3.6 versions prior to 3.6.14; MongoDB Server
nvd
← Previous5 / 5