Mongodb Vulnérabilités

Chronologie

Taper

Database Software17
Virtualization Software1

Produit

MongoDB Ops Manager5
MongoDB Server3
MongoDB C Driver2
MongoDB C# Driver2
MongoDB Atlas Kubernetes Operator1

Contre-mesures

Official Fix15
Temporary Fix0
Workaround0
Unavailable0
Not Defined3

Exploitabilité

High0
Functional0
Proof-of-Concept1
Unproven0
Not Defined17

Vecteur d'accès

Not Defined0
Physical0
Local2
Adjacent2
Network14

Authentification

Not Defined0
High6
Low3
None9

Interaction de l'utilisateur

Not Defined0
Required3
None15

C3BM Index

CVSSv3 Base

≤10
≤20
≤31
≤41
≤55
≤66
≤73
≤82
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤31
≤42
≤54
≤67
≤73
≤81
≤90
≤100

VulDB

≤10
≤21
≤32
≤45
≤51
≤65
≤72
≤82
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤51
≤62
≤71
≤87
≤90
≤100

CNA

≤10
≤20
≤30
≤41
≤52
≤62
≤71
≤81
≤91
≤100

Fournisseur

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k7
<2k10
<5k1
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k18
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter le volume du marché

🔴 CTI Activités

Affected Products (15): .NET Driver (1), Atlas Kubernetes Operator (1), C# Driver (2), C++ Driver (1), C Driver (2), Compass (1), Database Tools (1), Go Driver (1), Node.js Driver (1), Ops Manager (5), PHP Driver (1), Server (3), Swift Driver (1), bson-ruby (1), libbson (1)

PubliéBaseTempVulnérabilitéProdExpConEPSSCTICVE
07/03/20245.95.9MongoDB Server tls.CAFile authentification faibleDatabase SoftwareNot DefinedOfficial Fix0.000450.00CVE-2024-1351
12/01/20246.06.0MongoDB C Driver bson_utf8_validate  dénie de serviceDatabase SoftwareNot DefinedOfficial Fix0.000460.03CVE-2023-0437
07/11/20234.74.7MongoDB Atlas Kubernetes Operator divulgation de l'informationVirtualization SoftwareNot DefinedOfficial Fix0.000870.02CVE-2023-0436
29/08/20234.64.5MongoDB C Driver divulgation de l'informationDatabase SoftwareNot DefinedOfficial Fix0.000710.02CVE-2021-32050
23/08/20235.55.5MongoDB Server TLS authentification faibleDatabase SoftwareNot DefinedNot Defined0.000540.02CVE-2023-1409
08/08/20237.27.0MongoDB Ops Manager API Key Privilege EscalationDatabase SoftwareNot DefinedOfficial Fix0.000590.03CVE-2023-4009
09/06/20233.83.8MongoDB Ops Manager Diagnostics Archive vulnérabilité inconnueDatabase SoftwareNot DefinedOfficial Fix0.008850.00CVE-2023-0342
21/04/20236.46.1MongoDB bson-ruby ObjecId.legal dénie de serviceDatabase SoftwareProof-of-ConceptOfficial Fix0.033790.02CVE-2015-4411
21/02/20236.86.7MongoDB .NET Driver/C# Driver elévation de privilègesDatabase SoftwareNot DefinedOfficial Fix0.001000.00CVE-2022-48282
10/06/20215.55.5MongoDB Go Driver BSON elévation de privilègesDatabase SoftwareNot DefinedNot Defined0.000540.03CVE-2021-20329

8 plus d'entrées ne sont pas affichées

🔒 Login Required

You need to signup and login to see more of the remaining 8 results.

◂ PrécédentAperçuSuivant ▸

Do you need the next level of professionalism?

Upgrade your account now!