CVE-2025-6712

MongoDB Server may be susceptible to disruption caused by high memory usage, potentially leading to server crash. This condition is linked to inefficiencies in memory management related to internal operations. In scenarios where certain internal processes persist longer than anticipated, memory consumption can increase, potentially impacting server stability and availability. This issue affects MongoDB Server v8.0 versions prior to 8.0.10

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://jira.mongodb.org/browse/SERVER-106751	Issue Tracking Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*

History

03 Oct 2025, 20:49

Type	Values Removed	Values Added
First Time		Mongodb Mongodb mongodb
References	~~() https://jira.mongodb.org/browse/SERVER-106751 -~~	() https://jira.mongodb.org/browse/SERVER-106751 - Issue Tracking, Vendor Advisory
CPE		cpe:2.3:a:mongodb:mongodb:::::-:::*

08 Jul 2025, 16:18

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-07-07 15:15

Updated : 2025-10-03 20:49

NVD link : CVE-2025-6712

Mitre link : CVE-2025-6712

CVE.ORG link : CVE-2025-6712

JSON object : View

Products Affected

mongodb

mongodb

CWE

CWE-400

Uncontrolled Resource Consumption

{"id": "CVE-2025-6712", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "cna@mongodb.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2025-07-07T15:15:28.890", "references": [{"url": "https://jira.mongodb.org/browse/SERVER-106751", "tags": ["Issue Tracking", "Vendor Advisory"], "source": "cna@mongodb.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "cna@mongodb.com", "description": [{"lang": "en", "value": "CWE-400"}]}], "descriptions": [{"lang": "en", "value": "MongoDB Server may be susceptible to disruption caused by high memory usage, potentially leading to server crash. This condition is linked to inefficiencies in memory management related to internal operations. In scenarios where certain internal processes persist longer than anticipated, memory consumption can increase, potentially impacting server stability and availability. This issue affects MongoDB Server v8.0 versions prior to 8.0.10"}, {"lang": "es", "value": "MongoDB Server puede ser susceptible a interrupciones causadas por un alto uso de memoria, lo que podr\u00eda provocar un bloqueo del servidor. Esta condici\u00f3n est\u00e1 relacionada con ineficiencias en la gesti\u00f3n de memoria relacionadas con las operaciones internas. En escenarios donde ciertos procesos internos persisten m\u00e1s de lo previsto, el consumo de memoria puede aumentar, lo que podr\u00eda afectar la estabilidad y la disponibilidad del servidor. Este problema afecta a las versiones 8.0 y anteriores a la 8.0.10 de MongoDB Server."}], "lastModified": "2025-10-03T20:49:36.610", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*", "vulnerable": true, "matchCriteriaId": "E7E659D7-7AE0-4481-B274-DE0B185C8564", "versionEndExcluding": "8.0.10", "versionStartIncluding": "8.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "cna@mongodb.com"}