CVE-2012-6619: The default configuration for MongoDB before 2.3.2 does not validate objects, which allows remote authentic...

Security readout for executives and security teams

This is an old MongoDB issue affecting versions before 2.3.2. An authenticated remote user could send malformed BSON data that may crash the database process or expose memory contents. Business urgency depends on whether legacy MongoDB is still present and reachable by authenticated users. Exposure is most likely in legacy MongoDB deployments older than 2.3.2, especially systems still reachable over a network by authenticated users. The provided affected-product metadata is incomplete, so asset confirmation is required. Treat as a legacy exposure cleanup item. It is not KEV-listed in the provided data, but affected systems could suffer outage or memory disclosure if obsolete MongoDB remains accessible. Mitigation focus: Identify and retire MongoDB versions older than 2.3.2.; Upgrade affected MongoDB instances to fixed, vendor-supported versions.; Apply relevant Red Hat advisory updates where packaged MongoDB is used..

Prepared

Jun 14, 2026, 14:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.