Advisories · Technology
MongoDB Inc. MongoDB Entity Framework Core Provider.
Every CVE that names MongoDB Inc. MongoDB Entity Framework Core Provider among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.8 Medium
Malformed connection string may disable field level encryption
- MongoDB Inc. MongoDB Entity Framework Core Provider
- Weak cryptography or TLS
- CVSS 5.7 Medium
Logs may collect sensitive information
- MongoDB Inc. MongoDB Entity Framework Core Provider
- Information disclosure
- CVSS 6.8 Medium
Combining encryption settings may disable encryption
- MongoDB Inc. MongoDB Entity Framework Core Provider
- Weak cryptography or TLS