Atlas Sql Odbc Driver
Approved changes feed: RSS · Atom
cpe:2.3:a:mongodb:atlas_sql_odbc_driver:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mongodb (1aa156a6-63a9-5032-baaf-10197d408a1e) |
|---|---|
| Product | Atlas Sql Odbc Driver (7e618747-1ce9-5d15-96e5-b09a1edac9bf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-19503 |
vulnerable | 2026-09-16 04:34:15.652968 |
Insufficient OIDC endpoint validation could invoke unintended local protocol handlers
MEDIUM (4.8)
MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver do not validate the scheme of the authorization and token endpoints returned by an OIDC issuer's discovery document. A user induced to connect to an uncontrolled MongoDB deployment using MONGODB-OIDC authentication may have an uncontrolled URI dispatched to their operating system's default protocol handler, potentially exposing credentials or, under certain conditions, resulting in code execution in the user's context.
Published: 2026-08-12T20:17:55.369Z
Updated: 2026-08-13T12:48:17.425Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11575 |
vulnerable | 2026-06-08 07:04:28.533959 |
MongoDB Atlas SQL ODBC driver installation via MSI may leave ACLs unset on custom installation directories
HIGH (7.8)
Incorrect Default Permissions vulnerability in MongoDB Atlas SQL ODBC driver on Windows allows Privilege Escalation.This issue affects MongoDB Atlas SQL ODBC driver: from 1.0.0 through 2.0.0.
Published: 2025-10-23T00:22:00.809Z
Updated: 2026-02-26T16:57:12.170Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.