Mongodb Schwachstellen

Zeitverlauf

Typ

Database Software18
Virtualization Software1

Produkt

MongoDB Ops Manager5
MongoDB Server3
MongoDB Compass2
MongoDB C Driver2
MongoDB C# Driver2

Massnahmen

Official Fix15
Temporary Fix0
Workaround0
Unavailable0
Not Defined4

Ausnutzbarkeit

High0
Functional0
Proof-of-Concept1
Unproven0
Not Defined18

Zugriffsart

Not Defined0
Physical0
Local2
Adjacent2
Network15

Authentisierung

Not Defined0
High6
Low4
None9

Benutzeraktivität

Not Defined0
Required3
None16

C3BM Index

CVSSv3 Base

≤10
≤20
≤31
≤41
≤55
≤67
≤73
≤82
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤31
≤42
≤54
≤68
≤73
≤81
≤90
≤100

VulDB

≤10
≤21
≤32
≤45
≤52
≤65
≤72
≤82
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤51
≤62
≤71
≤87
≤90
≤100

CNA

≤10
≤20
≤30
≤41
≤52
≤62
≤71
≤82
≤91
≤100

Hersteller

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k7
<2k11
<5k1
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploit heute

<1k18
<2k1
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploitmarktvolumen

🔴 CTI Aktivitäten

Affected Products (15): .NET Driver (1), Atlas Kubernetes Operator (1), C# Driver (2), C++ Driver (1), C Driver (2), Compass (2), Database Tools (1), Go Driver (1), Node.js Driver (1), Ops Manager (5), PHP Driver (1), Server (3), Swift Driver (1), bson-ruby (1), libbson (1)

VeröffentlichtBaseTempSchwachstelleProdAusMasEPSSCTICVE
24.04.20246.06.0MongoDB Compass Privilege EscalationDatabase SoftwareNot DefinedNot Defined0.000430.04CVE-2024-3371
07.03.20245.95.9MongoDB Server tls.CAFile schwache AuthentisierungDatabase SoftwareNot DefinedOfficial Fix0.000450.00CVE-2024-1351
12.01.20246.06.0MongoDB C Driver bson_utf8_validate  Denial of ServiceDatabase SoftwareNot DefinedOfficial Fix0.000460.00CVE-2023-0437
07.11.20234.74.7MongoDB Atlas Kubernetes Operator Information DisclosureVirtualization SoftwareNot DefinedOfficial Fix0.000870.02CVE-2023-0436
29.08.20234.64.5MongoDB C Driver Information DisclosureDatabase SoftwareNot DefinedOfficial Fix0.000710.00CVE-2021-32050
23.08.20235.55.5MongoDB Server TLS schwache AuthentisierungDatabase SoftwareNot DefinedNot Defined0.000540.00CVE-2023-1409
08.08.20237.27.0MongoDB Ops Manager API Key Privilege EscalationDatabase SoftwareNot DefinedOfficial Fix0.000590.03CVE-2023-4009
09.06.20233.83.8MongoDB Ops Manager Diagnostics Archive unbekannte SchwachstelleDatabase SoftwareNot DefinedOfficial Fix0.012510.00CVE-2023-0342
21.04.20236.46.1MongoDB bson-ruby ObjecId.legal Denial of ServiceDatabase SoftwareProof-of-ConceptOfficial Fix0.033790.02CVE-2015-4411
21.02.20236.86.7MongoDB .NET Driver/C# Driver erweiterte RechteDatabase SoftwareNot DefinedOfficial Fix0.001000.04CVE-2022-48282

9 weitere Einträge werden nicht mehr angezeigt

🔒 Login Required

You need to signup and login to see more of the remaining 9 results.

◂ ZurückÜbersichtWeiter ▸

Might our Artificial Intelligence support you?

Check our Alexa App!