Skip to content
OpenAdvisories

Product · MongoDB

MongoDB Driver

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-18710

    Cleartext Storage of Sensitive Information in MongoDB Driver Logging During Client Initialization

    A MongoDB driver component could write sensitive configuration information, including a credential used for outbound network connectivity, to application log output in cleartext during routine client initialization. This occurs automatically as part of normal…

    MongoDB MongoDB Driver mongo-java-driver Ubuntu
  • Medium 6.4
    CVE-2021-20328

    MongoDB Java driver client-side field level encryption not verifying KMS host name

    Specific versions of the Java driver that support client-side field level encryption (CSFLE) fail to perform correct host name verification on the KMS server’s certificate. This vulnerability in combination with a privileged network position active MITM attac…

    MongoDB MongoDB Driver mongodb-driver-sync mongo-java-driver Ubuntu Maven