CVE-2015-7882: MongoDB

High severity, CVSS 8.1. EPSS: 1.8% chance of exploitation in the next 30 days.

Improper handling of LDAP authentication in MongoDB Server versions 3.0.0 to 3.0.6 allows an unauthenticated client to gain unauthorized access.

Affected products

• MongoDB MongoDB: from 3.0.0, up to and including 3.0.6

Published 2019-07-19. Last modified 2026-06-17.