Advisories · Technology

MongoDB Inc. MongoDB Ops Manager.

Every CVE that names MongoDB Inc. MongoDB Ops Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-4009 CVE record

CVSS 7.2 High

Privilege Escalation for Project Owner and Project User Admin Roles in Ops Manager
- MongoDB Inc. MongoDB Ops Manager
- CWE-648
Not analysed yet 8 Aug 2023
CVE-2023-0342 CVE record

CVSS 3.1 Low

MongoDB Ops Manager may disclose sensitive information in Diagnostic Archive
- MongoDB Inc. MongoDB Ops Manager
- Information disclosure
Not analysed yet 9 Jun 2023
CVE-2021-20335 CVE record

CVSS 6.7 Medium

SSL may be unexpectedly disabled during upgrade of multiple-server MongoDB Ops Manager
- MongoDB Inc. MongoDB Ops Manager
- Weak cryptography or TLS
Not analysed yet 11 Feb 2021
CVE-2020-7927 CVE record

CVSS 8.1 High

Potential privilege escalation in Ops Manager API
- MongoDB Inc. MongoDB Ops Manager
- CWE-648
Not analysed yet 23 Nov 2020
CVE-2019-2388 CVE record

CVSS 5.8 Medium

Potential exposure of log information in Ops Manager
- MongoDB Inc. MongoDB Ops Manager
- Broken access control
Not analysed yet 13 May 2020