Mongodb

Ops Manager

4 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.4

CVE-2026-8431

  • EPSS 0.05%
  • Veröffentlicht 12.05.2026 18:37:47
  • Zuletzt bearbeitet 13.05.2026 15:34:29

An administrative user with access to configure webhooks can execute arbitrary commands by configuring and then triggering webhooks containing specific FreeMarker template syntax.  This issue affects all MongoDB Ops Manager 7.0 versions and MongoD...

4.6

CVE-2021-20335

  • EPSS 0.06%
  • Veröffentlicht 11.02.2021 10:15:12
  • Zuletzt bearbeitet 21.11.2024 05:46:25

For MongoDB Ops Manager versions prior to and including 4.2.24 with multiple OM application servers, that have SSL turned on for their MongoDB processes, the upgrade to MongoDB Ops Manager versions prior to and including 4.4.12 triggers a bug where A...

6.5

CVE-2020-7927

  • EPSS 0.55%
  • Veröffentlicht 23.11.2020 19:15:11
  • Zuletzt bearbeitet 21.11.2024 05:38:01

Specially crafted API calls may allow an authenticated user who holds Organization Owner privilege to obtain an API key with Global Role privilege. This issue affects MongoDB Ops Manager v4.2 versions prior to and including 4.2.17, MongoDB Ops Manage...

5.3

CVE-2019-2388

  • EPSS 0.29%
  • Veröffentlicht 13.05.2020 17:15:11
  • Zuletzt bearbeitet 23.02.2026 16:20:41

In affected Ops Manager versions there is an exposed http route was that may allow attackers to view a specific access log of a publicly exposed Ops Manager instance. This issue affects: MongoDB Inc. MongoDB Ops Manager 4.0 versions 4.0.9, 4.0.10 and...