Approved changes feed: RSS · Atom

cpe:2.3:a:mongodb:mongodb:2.0.3:*:*:*:*:*:*:*

part: a version: 2.0.3 update: *

VendorMongodb (1aa156a6-63a9-5032-baaf-10197d408a1e)
ProductMongodb (fa9f1f9b-0cc9-5830-a189-b908276ac432)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/mongodb purl2cpe 2026-06-01 10:11:17.774667
pkg:deb/ubuntu/mongodb purl2cpe 2026-06-01 10:11:17.774668
pkg:github/mongodb/mongo purl2cpe 2026-06-01 10:11:17.774669

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-1892 vulnerable 2026-06-03 14:32:52.444588 Details available
MongoDB before 2.0.9 and 2.2.x before 2.2.4 does not properly validate requests to the nativeHelper function in SpiderMonkey, which allows remote authenticated users to cause a denial of service (invalid memory access and server crash) or execute arbitrary code via a crafted memory address in the first argument.
Published: 2013-10-01T20:00:00.000Z
Updated: 2024-08-06T15:20:37.304Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6619 vulnerable 2026-06-03 14:32:34.876406 Details available
The default configuration for MongoDB before 2.3.2 does not validate objects, which allows remote authenticated users to cause a denial of service (crash) or read system memory via a crafted BSON object in the column name in an insert command, which triggers a buffer over-read.
Published: 2014-03-06T15:00:00.000Z
Updated: 2024-08-06T21:36:01.807Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.