Browse all 67 CVE security advisories affecting MongoDB Inc.. AI-powered Chinese analysis, POCs, and references for each vulnerability.
MongoDB Inc. develops a popular document-oriented NoSQL database designed for high-volume data storage and flexible schema management. With fifty recorded Common Vulnerabilities and Exposures (CVEs), the platform has historically faced issues ranging from remote code execution and cross-site scripting to privilege escalation flaws. These vulnerabilities often stem from improper input validation, authentication bypasses, or insecure default configurations in earlier releases. Notable incidents include critical flaws allowing unauthenticated access to administrative interfaces, highlighting risks associated with default settings in production environments. The company actively addresses these concerns through regular security patches and updates, emphasizing the importance of proper configuration and timely maintenance. While the software remains widely adopted for its scalability, the frequency of CVEs underscores the necessity for rigorous security hygiene and continuous monitoring to mitigate potential exploitation vectors in enterprise deployments.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2023-4009 | Privilege Escalation for Project Owner and Project User Admin Roles in Ops Manager — MongoDB Ops Manager CWE-648 | 7.2 | High | 2023-08-08 |
| CVE-2023-0342 | MongoDB Ops Manager may disclose sensitive information in Diagnostic Archive — MongoDB Ops Manager CWE-497 | 3.1 | Low | 2023-06-09 |
| CVE-2021-20335 | SSL may be unexpectedly disabled during upgrade of multiple-server MongoDB Ops Manager — MongoDB Ops Manager CWE-319 | 6.7 | Medium | 2021-02-11 |
| CVE-2020-7927 | Potential privilege escalation in Ops Manager API — MongoDB Ops Manager CWE-648 | 8.1 | High | 2020-11-23 |
| CVE-2019-2388 | Potential exposure of log information in Ops Manager — MongoDB Ops Manager CWE-425 | 5.8 | Medium | 2020-05-13 |
This page lists every published CVE security advisory associated with MongoDB Inc.. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.