MongoDB

CVEs currently on EVULNABLE's Priority Feed for MongoDB, and this vendor's own CISA KEV history.

In EVULNABLE's ranked feed

Showing all 2 MongoDB CVEs in EVULNABLE's ranked feed.

#1 84 Urgent CVE-2025-14847 CISA federal deadline · Overdue by 9 monthsCISA KEV MongoDB — MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability

EVRS 84/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS8.7 (NVD)EPSS83.2% · 99.68th pctlKEV since2025-12-29

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.832.

Full CVE page NVD ↗CISA KEV ↗Vendor Advisory ↗

#2 83 Urgent CVE-2019-10758 KEV since 2021 · listed over a yearCISA KEV MongoDB — MongoDB mongo-express Remote Code Execution Vulnerability

EVRS 83/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.

CVSS9.9 (NVD)EPSS84.7% · 99.71st pctlKEV since2021-12-10

Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.847.

Full CVE page NVD ↗CISA KEV ↗