Логотип exploitDog
bind: "CVE-2025-14345"
Консоль
Логотип exploitDog

exploitDog

bind: "CVE-2025-14345"

Количество 6

Количество 6

ubuntu логотип

CVE-2025-14345

около 1 месяца назад

A post-authentication flaw in the network two-phase commit protocol used for cross-shard transactions in MongoDB Server may lead to logical data inconsistencies under specific conditions which are not predictable and exist for a very short period of time. This error can cause the transaction coordination logic to misinterpret the transaction as committed, resulting in inconsistent state on those shards. This may lead to low integrity and availability impact. This issue impacts MongoDB Server v8.0 versions prior to 8.0.16, MongoDB Server v7.0 versions prior to 7.0.26 and MongoDB server v8.2 versions prior to 8.2.2.

CVSS3: 4.2
EPSS: Низкий
nvd логотип

CVE-2025-14345

около 1 месяца назад

A post-authentication flaw in the network two-phase commit protocol used for cross-shard transactions in MongoDB Server may lead to logical data inconsistencies under specific conditions which are not predictable and exist for a very short period of time. This error can cause the transaction coordination logic to misinterpret the transaction as committed, resulting in inconsistent state on those shards. This may lead to low integrity and availability impact. This issue impacts MongoDB Server v8.0 versions prior to 8.0.16, MongoDB Server v7.0 versions prior to 7.0.26 and MongoDB server v8.2 versions prior to 8.2.2.

CVSS3: 4.2
EPSS: Низкий
debian логотип

CVE-2025-14345

около 1 месяца назад

A post-authenticationflaw in the network two-phase commit protocol use ...

CVSS3: 4.2
EPSS: Низкий
github логотип

GHSA-hp99-hc25-26x7

около 1 месяца назад

A post-authentication flaw in the network two-phase commit protocol used for cross-shard transactions in MongoDB Server may lead to logical data inconsistencies under specific conditions which are not predictable and exist for a very short period of time. This error can cause the transaction coordination logic to misinterpret the transaction as committed, resulting in inconsistent state on those shards. This may lead to low integrity and availability impact. This issue impacts MongoDB Server v8.0 versions prior to 8.0.16, MongoDB Server v7.0 versions prior to 7.0.26 and MongoDB server v8.2 versions prior to 8.2.2.

CVSS3: 4.2
EPSS: Низкий
fstec логотип

BDU:2025-16095

около 1 месяца назад

Уязвимость системы управления базами данных MongoDB, связанная с некорректной блокировкой ресурсов, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 4.2
EPSS: Низкий
redos логотип

ROS-20251215-7301

около 1 месяца назад

Уязвимость mongodb-org

CVSS3: 4.2
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2025-14345

A post-authentication flaw in the network two-phase commit protocol used for cross-shard transactions in MongoDB Server may lead to logical data inconsistencies under specific conditions which are not predictable and exist for a very short period of time. This error can cause the transaction coordination logic to misinterpret the transaction as committed, resulting in inconsistent state on those shards. This may lead to low integrity and availability impact. This issue impacts MongoDB Server v8.0 versions prior to 8.0.16, MongoDB Server v7.0 versions prior to 7.0.26 and MongoDB server v8.2 versions prior to 8.2.2.

CVSS3: 4.2
0%
Низкий
около 1 месяца назад
nvd логотип
CVE-2025-14345

A post-authentication flaw in the network two-phase commit protocol used for cross-shard transactions in MongoDB Server may lead to logical data inconsistencies under specific conditions which are not predictable and exist for a very short period of time. This error can cause the transaction coordination logic to misinterpret the transaction as committed, resulting in inconsistent state on those shards. This may lead to low integrity and availability impact. This issue impacts MongoDB Server v8.0 versions prior to 8.0.16, MongoDB Server v7.0 versions prior to 7.0.26 and MongoDB server v8.2 versions prior to 8.2.2.

CVSS3: 4.2
0%
Низкий
около 1 месяца назад
debian логотип
CVE-2025-14345

A post-authenticationflaw in the network two-phase commit protocol use ...

CVSS3: 4.2
0%
Низкий
около 1 месяца назад
github логотип
GHSA-hp99-hc25-26x7

A post-authentication flaw in the network two-phase commit protocol used for cross-shard transactions in MongoDB Server may lead to logical data inconsistencies under specific conditions which are not predictable and exist for a very short period of time. This error can cause the transaction coordination logic to misinterpret the transaction as committed, resulting in inconsistent state on those shards. This may lead to low integrity and availability impact. This issue impacts MongoDB Server v8.0 versions prior to 8.0.16, MongoDB Server v7.0 versions prior to 7.0.26 and MongoDB server v8.2 versions prior to 8.2.2.

CVSS3: 4.2
0%
Низкий
около 1 месяца назад
fstec логотип
BDU:2025-16095

Уязвимость системы управления базами данных MongoDB, связанная с некорректной блокировкой ресурсов, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 4.2
0%
Низкий
около 1 месяца назад
redos логотип
ROS-20251215-7301

Уязвимость mongodb-org

CVSS3: 4.2
0%
Низкий
около 1 месяца назад

Уязвимостей на страницу