[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwYUQmAwy4gdMTSb9WQMxT0-_wB7g1OyonTL6I77fLg4":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":145,"kevVulnerabilities":209,"topProductsByCves":210,"seoMetadata":221,"meta":230},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":144},20325,"mongodb",28,102,0,2396,"2025-09-05","m",[16,20,26,31,35,41,46,52,56,61,65,70,75,80,83,88,93,97,101,106,110,115,119,122,127,132,137,140],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},113635,367,68,{"id":21,"product_name":22,"version_count":23,"cve_count":24,"kev_count":11,"last_cve_update":25},113625,"compass",72,4,"2025-02-27",{"id":27,"product_name":28,"version_count":29,"cve_count":24,"kev_count":11,"last_cve_update":30},113624,"c_driver",131,"2024-08-07",{"id":32,"product_name":33,"version_count":34,"cve_count":24,"kev_count":11,"last_cve_update":25},113638,"mongosh",148,{"id":36,"product_name":37,"version_count":38,"cve_count":39,"kev_count":11,"last_cve_update":40},113640,"ops_manager",130,3,"2021-02-11",{"id":42,"product_name":43,"version_count":44,"cve_count":39,"kev_count":11,"last_cve_update":45},113631,"libbson",140,"2025-03-18",{"id":47,"product_name":48,"version_count":49,"cve_count":50,"kev_count":11,"last_cve_update":51},113646,"rust_driver",41,2,"2024-07-02",{"id":53,"product_name":54,"version_count":49,"cve_count":50,"kev_count":11,"last_cve_update":55},113641,"ops_manager_server","2023-08-08",{"id":57,"product_name":58,"version_count":59,"cve_count":50,"kev_count":11,"last_cve_update":60},113623,"c\\#_driver",88,"2023-02-21",{"id":62,"product_name":63,"version_count":64,"cve_count":50,"kev_count":11,"last_cve_update":30},113642,"php_driver",110,{"id":66,"product_name":67,"version_count":68,"cve_count":50,"kev_count":11,"last_cve_update":69},113621,"bson",58,"2020-03-30",{"id":71,"product_name":72,"version_count":73,"cve_count":50,"kev_count":11,"last_cve_update":74},113629,"js-bson",94,"2020-03-31",{"id":76,"product_name":77,"version_count":11,"cve_count":78,"kev_count":11,"last_cve_update":79},113647,"swift_driver",1,"2023-08-29",{"id":81,"product_name":82,"version_count":11,"cve_count":78,"kev_count":11,"last_cve_update":79},113622,"c\\+\\+",{"id":84,"product_name":85,"version_count":86,"cve_count":78,"kev_count":11,"last_cve_update":87},113626,"database_tools",189,"2021-04-12",{"id":89,"product_name":90,"version_count":91,"cve_count":78,"kev_count":11,"last_cve_update":92},113627,"go_driver",53,"2021-06-10",{"id":94,"product_name":95,"version_count":34,"cve_count":78,"kev_count":11,"last_cve_update":96},113628,"java_driver","2021-02-25",{"id":98,"product_name":99,"version_count":100,"cve_count":78,"kev_count":11,"last_cve_update":96},113632,"libmongocrypt",11,{"id":102,"product_name":103,"version_count":104,"cve_count":78,"kev_count":11,"last_cve_update":105},113633,"mongocryptd",66,"2024-10-28",{"id":107,"product_name":108,"version_count":109,"cve_count":78,"kev_count":11,"last_cve_update":105},113634,"mongo_crypt_v1.so",36,{"id":111,"product_name":112,"version_count":113,"cve_count":78,"kev_count":11,"last_cve_update":114},113636,"mongodb_enterprise_kubernetes_operator",27,"2020-04-09",{"id":116,"product_name":117,"version_count":118,"cve_count":78,"kev_count":11,"last_cve_update":87},113637,"mongomirror",13,{"id":120,"product_name":121,"version_count":11,"cve_count":78,"kev_count":11,"last_cve_update":79},113639,"node.js",{"id":123,"product_name":124,"version_count":125,"cve_count":78,"kev_count":11,"last_cve_update":126},113643,"pymongo",136,"2024-06-05",{"id":128,"product_name":129,"version_count":130,"cve_count":78,"kev_count":11,"last_cve_update":131},113620,"atlas_kubernetes_operator",30,"2023-11-07",{"id":133,"product_name":134,"version_count":135,"cve_count":11,"kev_count":11,"last_cve_update":136},113645,"ruby_driver",142,null,{"id":138,"product_name":139,"version_count":118,"cve_count":11,"kev_count":11,"last_cve_update":136},113630,"kubernetes_operator",{"id":141,"product_name":142,"version_count":143,"cve_count":11,"kev_count":11,"last_cve_update":136},113644,"python_driver",112,"Mongodb is a technology vendor with 28 tracked products and 102 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[146,155,160,168,174,180,186,192,197,203],{"cveId":147,"description":148,"publishedDate":149,"cvssScore":150,"cvssVersion":151,"severity":152,"isKev":153,"epssScore":154},"CVE-2013-1892","MongoDB before 2.0.9 and 2.2.x before 2.2.4 does not properly validate requests to the nativeHelper function in SpiderMonkey, which allows remote authenticated users to cause a denial of service (invalid memory access and server crash) or execute arbitrary code via a crafted memory address in the first argument.","2013-10-01",6,"v2","Medium",false,0.44543,{"cveId":156,"description":157,"publishedDate":149,"cvssScore":158,"cvssVersion":151,"severity":152,"isKev":153,"epssScore":159},"CVE-2013-3969","The find prototype in scripting\u002Fengine_v8.h in MongoDB 2.4.0 through 2.4.4 allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and server crash) or possibly execute arbitrary code via an invalid RefDB object.",6.5,0.10112,{"cveId":161,"description":162,"publishedDate":163,"cvssScore":164,"cvssVersion":165,"severity":166,"isKev":153,"epssScore":167},"CVE-2015-4411","The Moped::BSON::ObjecId.legal? method in mongodb\u002Fbson-ruby before 3.0.4 as used in rubygem-moped allows remote attackers to cause a denial of service (worker resource consumption) via a crafted string. NOTE: This issue is due to an incomplete fix to CVE-2015-4410.","2020-02-20",7.5,"v3.1","High",0.06372,{"cveId":169,"description":170,"publishedDate":171,"cvssScore":172,"cvssVersion":151,"severity":152,"isKev":153,"epssScore":173},"CVE-2012-6619","The default configuration for MongoDB before 2.3.2 does not validate objects, which allows remote authenticated users to cause a denial of service (crash) or read system memory via a crafted BSON object in the column name in an insert command, which triggers a buffer over-read.","2014-03-06",6.4,0.03894,{"cveId":175,"description":176,"publishedDate":177,"cvssScore":164,"cvssVersion":178,"severity":166,"isKev":153,"epssScore":179},"CVE-2017-14227","In MongoDB libbson 1.7.0, the bson_iter_codewscope function in bson-iter.c miscalculates a bson_utf8_validate length argument, which allows remote attackers to cause a denial of service (heap-based buffer over-read in the bson_utf8_validate function in bson-utf8.c), as demonstrated by bson-to-json.c.","2017-09-09","v3.0",0.02797,{"cveId":181,"description":182,"publishedDate":183,"cvssScore":184,"cvssVersion":151,"severity":152,"isKev":153,"epssScore":185},"CVE-2015-1609","MongoDB before 2.4.13 and 2.6.x before 2.6.8 allows remote attackers to cause a denial of service via a crafted UTF-8 string in a BSON request.","2015-03-30",5,0.02757,{"cveId":187,"description":188,"publishedDate":189,"cvssScore":190,"cvssVersion":151,"severity":152,"isKev":153,"epssScore":191},"CVE-2013-2132","bson\u002F_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to decoding of an \"invalid DBRef.\"","2013-08-15",4.3,0.02645,{"cveId":193,"description":194,"publishedDate":195,"cvssScore":164,"cvssVersion":178,"severity":166,"isKev":153,"epssScore":196},"CVE-2016-3104","mongod in MongoDB 2.6, when using 2.4-style users, and 2.4 allow remote attackers to cause a denial of service (memory consumption and process termination) by leveraging in-memory database representation when authenticating against a non-existent database.","2017-04-14",0.02489,{"cveId":198,"description":199,"publishedDate":69,"cvssScore":200,"cvssVersion":165,"severity":201,"isKev":153,"epssScore":202},"CVE-2020-7610","All versions of bson before 1.1.4 are vulnerable to Deserialization of Untrusted Data. The package will ignore an unknown value for an object's _bsotype, leading to cases where an object is serialized as a document rather than the intended BSON type.",9.8,"Critical",0.02265,{"cveId":204,"description":205,"publishedDate":206,"cvssScore":207,"cvssVersion":178,"severity":166,"isKev":153,"epssScore":208},"CVE-2018-16790","_bson_iter_next_internal in bson-iter.c in libbson 1.12.0, as used in MongoDB mongo-c-driver and other products, has a heap-based buffer over-read via a crafted bson buffer.","2018-09-10",8.1,0.02128,[],[211,212,213,214,215,216,217,218,219,220],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},{"id":21,"product_name":22,"version_count":23,"cve_count":24,"kev_count":11,"last_cve_update":25},{"id":27,"product_name":28,"version_count":29,"cve_count":24,"kev_count":11,"last_cve_update":30},{"id":32,"product_name":33,"version_count":34,"cve_count":24,"kev_count":11,"last_cve_update":25},{"id":36,"product_name":37,"version_count":38,"cve_count":39,"kev_count":11,"last_cve_update":40},{"id":42,"product_name":43,"version_count":44,"cve_count":39,"kev_count":11,"last_cve_update":45},{"id":47,"product_name":48,"version_count":49,"cve_count":50,"kev_count":11,"last_cve_update":51},{"id":53,"product_name":54,"version_count":49,"cve_count":50,"kev_count":11,"last_cve_update":55},{"id":57,"product_name":58,"version_count":59,"cve_count":50,"kev_count":11,"last_cve_update":60},{"id":62,"product_name":63,"version_count":64,"cve_count":50,"kev_count":11,"last_cve_update":30},{"title":222,"metaDescription":223,"keywords":224,"structuredData":225},"Mongodb - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Mongodb covering 28 products with 102 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Mongodb vulnerabilities, Mongodb security, Mongodb CVE, Mongodb threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":226,"@type":227,"name":228,"description":223,"url":229},"https:\u002F\u002Fschema.org","Organization","Mongodb","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmongodb",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":231,"apiVersion":232},"2026-10-18T21:02:27.427Z","3.0"]