Approved changes feed: RSS · Atom

cpe:2.3:a:mongodb:mongodb:6.0.7:*:*:*:*:*:*:*

part: a version: 6.0.7 update: *

VendorMongodb (1aa156a6-63a9-5032-baaf-10197d408a1e)
ProductMongodb (fa9f1f9b-0cc9-5830-a189-b908276ac432)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/mongodb purl2cpe 2026-06-01 10:11:17.883364
pkg:deb/ubuntu/mongodb purl2cpe 2026-06-01 10:11:17.883365
pkg:github/mongodb/mongo purl2cpe 2026-06-01 10:11:17.883367

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-6714 vulnerable 2026-06-03 15:12:28.709767 db.gcve.eu returned HTTP 503. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6713 vulnerable 2026-06-03 15:12:28.706072 db.gcve.eu returned HTTP 503. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6711 vulnerable 2026-06-03 15:12:28.669951 db.gcve.eu returned HTTP 503. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6710 vulnerable 2026-06-03 15:12:28.666667 db.gcve.eu returned HTTP 503. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6709 vulnerable 2026-06-03 15:12:28.657180 db.gcve.eu returned HTTP 503. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6707 vulnerable 2026-06-03 15:12:28.635647 db.gcve.eu returned HTTP 503. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6706 vulnerable 2026-06-03 15:12:28.574212 db.gcve.eu returned HTTP 503. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3085 vulnerable 2026-06-03 15:01:03.623076 db.gcve.eu returned HTTP 503. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3084 vulnerable 2026-06-03 15:01:03.602926 db.gcve.eu returned HTTP 503. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3083 vulnerable 2026-06-03 15:01:03.590991 db.gcve.eu returned HTTP 503. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3082 vulnerable 2026-06-03 15:01:03.563835 db.gcve.eu returned HTTP 503. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8305 vulnerable 2026-06-03 14:58:18.073681 MongoDB Server secondaries may crash due to forced index constraints
MEDIUM (6.5)
prepareUnique index may cause secondaries to crash due to incorrect enforcement of index constraints on secondaries, where in extreme cases may cause multiple secondaries crashing leading to no primaries. This issue affects MongoDB Server v6.0 versions prior to 6.0.17, MongoDB Server v7.0 versions prior to 7.0.13 and MongoDB Server v7.3 versions prior to 7.3.4
Published: 2024-10-21T14:10:31.079Z
Updated: 2024-10-21T15:50:06.751Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7553 vulnerable 2026-06-03 14:58:06.149802 Accessing Untrusted Directory May Allow Local Privilege Escalation
HIGH (7.3)
Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This may result in the application executing arbitrary behaviour determined by the contents of untrusted files. This issue affects MongoDB Server v5.0 versions prior to 5.0.27, MongoDB Server v6.0 versions prior to 6.0.16, MongoDB Server v7.0 versions prior to 7.0.12, MongoDB Server v7.3 versions prior 7.3.3, MongoDB C Driver versions prior to 1.26.2 and MongoDB PHP Driver versions prior to 1.18.1. Required Configuration: Only environments with Windows as the underlying operating system is affected by this issue
Published: 2024-08-07T09:57:49.818Z
Updated: 2024-08-07T15:27:46.258Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6375 vulnerable 2026-06-03 14:58:02.759370 db.gcve.eu returned HTTP 503. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3372 vulnerable 2026-06-03 14:56:24.173847 db.gcve.eu returned HTTP 503. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10921 vulnerable 2026-06-03 14:54:12.941162 db.gcve.eu returned HTTP 503. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.