Known vulnerabilities in MongoDB Enterprise Advanced with IBM

Vendor: IBM Corporation
Software: MongoDB Enterprise Advanced with IBM
Software CPE: cpe:2.3:a:ibm_corporation:mongodb_enterprise_advanced_with_ibm:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 44
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MongoDB Enterprise Advanced with IBM MongoDB Enterprise Advanced with IBM is affected by 44 known vulnerabilities: 8 high, 24 medium, 12 low Critical High Medium Low

Vulnerabilities (44)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU132261 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2026-0636		 CWE-90 Medium
No
No
 3.0.6 25.05.2026 SB2026052529
SB2026052531
SB2026052540
and 9 more
#VU128374 - Improper Access Control
CVE-2026-22731		 CWE-284 High
No
No
 1.16.0 28.04.2026 SB20260428205
SB2026061632
SB2026062914
and 1 more
#VU128371 - Improper Access Control
CVE-2026-22733		 CWE-284 High
No
No
 1.16.0 28.04.2026 SB20260428205
SB2026052937
SB2026061632
and 1 more
#VU128235 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-40977		 CWE-59 Low
No
No
 1.16.0 27.04.2026 SB20260427182
SB2026052513
SB2026052929
and 2 more
#VU128234 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2026-40975		 CWE-338 Medium
No
No
 1.16.0 27.04.2026 SB20260427182
SB2026052513
SB2026052929
and 3 more
#VU128232 - Improper Access Control
CVE-2026-40973		 CWE-284 Low
No
No
 1.16.0 27.04.2026 SB20260427182
SB2026052513
SB2026052929
and 2 more
#VU128224 - Observable discrepancy
CVE-2026-22746		 CWE-203 Low
No
No
 1.16.0 27.04.2026 SB20260427181
SB2026052513
SB2026060828
and 1 more
#VU126752 - Improper input validation
CVE-2026-27727		 CWE-20 High
No
No
 8.0.22 22.04.2026 SB20260422128
SB20260422169
SB20260422170
and 6 more
#VU126753 - Deserialization of Untrusted Data
CVE-2026-27830		 CWE-502 Medium
No
No
 8.0.22 22.04.2026 SB20260422128
SB20260422168
SB20260422170
and 7 more
#VU125747 - Improper Encoding or Escaping of Output
CVE-2026-34483		 CWE-116 Medium
No
No
 1.16.0 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 19 more
#VU125744 - Improper Certificate Validation
CVE-2026-34500		 CWE-295 Low
No
No
 1.16.0 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 13 more
#VU125745 - Information Exposure Through Log Files
CVE-2026-34487		 CWE-532 Medium
No
No
 1.16.0 09.04.2026 SB20260409110
SB20260417131
SB20260422214
and 20 more
#VU123883 - Resource exhaustion
CVE-2025-66453		 CWE-400 Low
No
No
 1.16.0 11.03.2026 SB2026031137
SB2026031139
SB2026032529
and 4 more
#VU123577 - Missing release of memory after effective lifetime
CVE-2026-1605		 CWE-401 Medium
No
No
 1.16.0 05.03.2026 SB2026030559
SB2026050522
SB2026061616
and 2 more
#VU123576 - Improper input validation
CVE-2025-11143		 CWE-20 Low
No
No
 1.16.0, 8.0.22 05.03.2026 SB2026030558
SB2026040716
SB2026042070
and 10 more
#VU123432 - Uncontrolled Recursion
CVE-2026-27601		 CWE-674 Medium
No
No
 8.0.21 03.03.2026 SB2026030327
SB2026031519
SB2026031520
and 7 more
#VU122999 - Improper Authorization
CVE-2026-24734		 CWE-285 Medium
No
No
 1.16.0 17.02.2026 SB2026021766
SB2026030536
SB2026031245
and 24 more
#VU121928 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2025-13465		 CWE-1321 Medium
No
No
 8.0.20 22.01.2026 SB2026012209
SB2026012701
SB2026012744
and 65 more
#VU120976 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-66648		 CWE-79 Low
Available
No
 1.16.0 06.01.2026 SB2026010619
SB2026061715
#VU118376 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-59840		 CWE-79 Low
No
No
 1.16.0 12.11.2025 SB2025111256
SB2025111379
SB2026061725


Showing elements 1 - 20 out of 44