CVE catalog

CVE-2025-3082

UBUNTU-CVE-2025-3082

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.20% · Oct 27, 2026

A user authorized to access a view may be able to alter the intended collation, allowing them to access to a different or unintended view of underlying data. This issue affects MongoDB Server v5.0 version prior to 5.0.31, MongoDB Server v6.0 version prior to 6.0.20, MongoDB Server v7.0 version prior to 7.0.14 and MongoDB Server v7.3 versions prior to 7.3.4.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntumongodbpro1:2.4.6-0ubuntu5vulnerable
Ubuntumongodbpro1:2.4.6-0ubuntu6vulnerable
Ubuntumongodbpro1:2.4.8-1ubuntu1vulnerable
Ubuntumongodbpro1:2.4.8-2vulnerable
Ubuntumongodbpro1:2.4.9-1vulnerable
Ubuntumongodbpro1:2.4.9-1ubuntu1vulnerable
Ubuntumongodbpro1:2.4.9-1ubuntu2vulnerable
Ubuntumongodbpro1:2.4.9-1ubuntu2+esm2vulnerable
Ubuntumongodbpro1:2.6.10-0ubuntu1vulnerable
Ubuntumongodbpro1:2.6.10-0ubuntu1+esm2vulnerable
Ubuntumongodbpro1:3.4.7-1vulnerable
Ubuntumongodbpro1:3.4.7-1ubuntu1vulnerable
Ubuntumongodbpro1:3.4.7-1ubuntu2vulnerable
Ubuntumongodbpro1:3.4.7-1ubuntu4vulnerable
Ubuntumongodbpro1:3.4.14-3ubuntu1vulnerable
Ubuntumongodbpro1:3.4.14-3ubuntu2vulnerable
Ubuntumongodbpro1:3.6.3-0ubuntu1vulnerable
Ubuntumongodbpro1:3.6.3-0ubuntu1.1vulnerable
Ubuntumongodbpro1:3.6.3-0ubuntu1.3vulnerable
Ubuntumongodbpro1:3.6.3-0ubuntu1.4vulnerable
Ubuntumongodbpro1:3.6.3-0ubuntu1.4+esm1vulnerable
Ubuntumongodbpro1:3.6.3-0ubuntu1.4+esm2vulnerable
Ubuntumongodbpro1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu2vulnerable
Ubuntumongodbpro1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5vulnerable
Ubuntumongodbpro1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.2vulnerable
Ubuntumongodbpro1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3vulnerable
Ubuntumongodbpro1:3.6.9+really3.6.8+90~g8e540c0b6d-0ubuntu5.3+esm1vulnerable

Fixed-version evidence

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References