CVE-2025-3084

EUVD-2025-9312
When run on commands with certain arguments set, explain may fail to validate these arguments before using them. This can lead to crashes in router servers. This affects MongoDB Server v5.0 prior to 5.0.31, MongoDB Server v6.0 prior to 6.0.20, MongoDB Server v7.0 prior to 7.0.16 and MongoDB Server v8.0 prior to 8.0.4
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
mongodbCNA
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 64%
Affected Products (NVD)
VendorProductVersion
mongodbmongodb
5.0.0 ≤
𝑥
< 5.0.31
mongodbmongodb
6.0.0 ≤
𝑥
< 6.0.20
mongodbmongodb
7.0.0 ≤
𝑥
< 7.0.16
mongodbmongodb
8.0.0 ≤
𝑥
< 8.0.4
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mongodb
bionic
deferred
focal
deferred
jammy
dne
noble
dne
oracular
dne
plucky
dne
questing
dne
trusty
deferred
xenial
deferred