Most recent entries from all

9AKK108472A9037 — ABB AbilityTM zenon Security Risk Due to End-of-Life MongoDB Component

ABB is aware of publicly reported vulnerabilities affecting MongoDB 4.2, which is bundled within the IIoT Services of the affected product versions. MongoDB 4.2 has reached end-of-life and contains multiple known security vulnerabilities. An attacker who successfully exploits these vulnerabilities could potentially access sensitive information, cause denial of service, or disrupt system availability.

BIT-mongodb-2020-7925 — Denial of Service when processing malformed Role names

Affected: Bitnami: mongodb

Incorrect validation of user input in the role name parser may lead to use of uninitialized memory allowing an unauthenticated attacker to use a specially crafted request to cause a denial of service. This issue affects MongoDB Server v4.4 versions prior to 4.4.0; MongoDB Server v4.2 versions prior to 4.2.9.

EUVD-2026-177762

fkie_cve-2020-7925

GHSA-v8v4-4v92-48h2

Incorrect validation of user input in the role name parser may lead to use of uninitialized memory allowing an unauthenticated attacker to use a specially crafted request to cause a denial of service. This issue affects: MongoDB Inc. MongoDB Server v4.4 versions prior to 4.4.0-rc12; v4.2 versions prior to 4.2.9.

gsd-2020-7925

ICSA-26-218-01 — ABB Ability Zenon

Withdrawn: UBUNTU-CVE-2020-7925

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: mongodb, Ubuntu:16.04:LTS: mongodb, Ubuntu:18.04:LTS: mongodb, Ubuntu:20.04:LTS: mongodb