バージョンを確認する
mongod --version2.4 に影響するCVE
| CVE | タイトル | CVSS | 悪用 | EPSS | 公開日 |
|---|---|---|---|---|---|
| CVE-2016-3104 | mongod in MongoDB 2.6, when using 2.4-style users, and 2.4 allow remote attackers to cause a denial of service... | 7.5 | — | 2017-04-15 | |
| CVE-2026-9753 | Server crash via malformed binary diff passed to $_internalApplyOplogUpdate. | 7.2 | — | 2026-06-10 | |
| CVE-2013-4650 | MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system... | 6.5 | — | 2013-07-04 | |
| CVE-2013-3969 | The find prototype in scripting/engine_v8.h in MongoDB 2.4.0 through 2.4.4 allows remote authenticated users t... | 6.5 | — | 2013-10-02 | |
| CVE-2016-6494 | The client in MongoDB uses world-readable permissions on .dbshell history files, which might allow local users... | 5.5 | — | 2016-10-04 | |
| CVE-2021-32036 | Denial of Service and Data Integrity vulnerability in features command | 5.4 | — | 2022-02-05 | |
| CVE-2015-1609 | MongoDB before 2.4.13 and 2.6.x before 2.6.8 allows remote attackers to cause a denial of service via a crafte... | 5.0 | — | 2015-03-30 | |
| CVE-2013-2132 | bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before 2.5.2, as used in MongoDB, allows context... | 4.3 | — | 2013-08-16 |
データ：CVE List（CVE® Program）、NVD、CISA KEV、FIRST EPSS（EPSS については https://www.first.org/epss を参照）、endoflife.date。ソフトウェア一覧：awesome-selfhosted（CC BY-SA 3.0）。