MongoDB
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 355 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 1, 2013 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Incorrect authorization in MongoDB Server router for bulk writes to system namespaces
Collection validators using collation-accepting expressions can crash MongoDB Server on insert
Fixed values in MongoDB Server $bucket stage may be misread as field references
Missing Authorization Check on Internal Aggregation Stage in MongoDB Server mongos Leads to Denial of Service
MongoDB Server may disclose process memory via a crafted `$_internalApplyOplogUpdate` aggregation pipeline
Ops Manager Sensitive MFA Enrollment Information Exposure in User Listings
Ops Manager Improper Authorization in Daily Host Monitoring Retrieval
Ops Manager Uncontrolled Resource Consumption in Monitoring Endpoints
Application denial of service via out-of-bounds read in BSON Regex decoding in MongoDB Python Driver
Application denial of service and data truncation via unchecked BSON append failures in MongoDB PHP Driver
Monitor MongoDB in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.