VDB
CVE-2021-20333
CVE-2021-20333
PUBLISHED
CVSS 5.300000190734863 MEDIUM
Sending specially crafted commands to a MongoDB Server may result in artificial log entries being generated or for log entries to be split. This issue affects MongoDB Server v3.6 versions prior to 3.6.20; MongoDB Server v4.0 versions prior to 4.0.21 and MongoDB Server v4.2 versions prior to 4.2.10.
EPSS 1.27% · 67.5th percentile
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:F/RL:U/RC:C
EPSS Score
1.27%
67.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| ABB | IIoT services with MongoDB 4.2 installed on ABB Ability Zenon /all |
Timeline
- Jul 23, 2021 CVE Published
- Jul 24, 2021 EPSS Score
- Sep 22, 2021 EPSS Score
- Nov 20, 2021 EPSS Score
- Jan 19, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Mar 19, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- Jul 17, 2022 EPSS Score
- Sep 15, 2022 EPSS Score
- Nov 13, 2022 EPSS Score
- Jan 12, 2023 EPSS Score