Skip to content
OpenAdvisories

Product · MongoDB

mongo-java-driver

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.4
    CVE-2021-20328

    MongoDB Java driver client-side field level encryption not verifying KMS host name

    Specific versions of the Java driver that support client-side field level encryption (CSFLE) fail to perform correct host name verification on the KMS server’s certificate. This vulnerability in combination with a privileged network position active MITM attac…

    MongoDB MongoDB Driver mongo-java-driver mongodb-driver-legacy Ubuntu Maven