Read the docs

MongoDB

Records377All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical15CVSS 9.0–10.0
CVSS high186CVSS 7.0–8.9

Exploited now

MongoDB records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

7 records in Bi Connector Odbc Driver · all components

Priority MEDIUM 50

The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application supplies an unusually long catalog, schema, or object name to a metadata retrieval function.

CVSS 4.0CRITICAL 9.5 Network No auth No interaction EPSS 0.00539 Published 2026-08-12 Fixed in 1.4.9 CWE-190
Priority LOW 38

A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setup dialog to write outside the bounds of an allocated buffer.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00211 Published 2026-08-12 Fixed in 1.4.9 CWE-121
Priority LOW 32

The MongoDB BI Connector ODBC Driver converts floating point column values into text without checking that the result fits within the destination buffer.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0042 Published 2026-08-12 Fixed in 1.4.9 CWE-787
Open these records in search →