CVE-2018-20804

6.5 mediumEPSS 1.2%

Medium (6.5) in mongodb mongodb. EPSS 1.2% chance of exploitation in the next 30 days.

A user authorized to perform database queries may trigger denial of service by issuing specially crafted applyOps invocations. This issue affects MongoDB Server v4.0 versions prior to 4.0.10 and MongoDB Server v3.6 versions prior to 3.6.13.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2020-11-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mongodb:mongodb

References

https://jira.mongodb.org/browse/SERVER-35636
https://jira.mongodb.org/browse/SERVER-35636

Check your stack JSON