Search
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2017-18381 | 2 Edx, Mongodb | 2 Edx-platform, Mongodb | 2020-01-07 | 6.5 MEDIUM | 9.1 CRITICAL |
| The installation process in Open edX before 2017-01-10 exposes a MongoDB instance to external connections with default credentials. | |||||
| CVE-2017-15535 | 1 Mongodb | 1 Mongodb | 2017-11-22 | 6.4 MEDIUM | 9.1 CRITICAL |
| MongoDB 3.4.x before 3.4.10, and 3.5.x-development, has a disabled-by-default configuration setting, networkMessageCompressors (aka wire protocol compression), which exposes a vulnerability when enabled that could be exploited by a malicious attacker to deny service or modify memory. | |||||