{"resultsPerPage":1,"startIndex":0,"totalResults":188,"format":"NVD_CVE","version":"2.0","timestamp":"2026-10-18T16:50:24.373","vulnerabilities":[{"cve":{"id":"CVE-2013-4650","sourceIdentifier":"cve@mitre.org","published":"2013-07-04T14:33:41.667","lastModified":"2026-06-16T23:57:39.500","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of __system in an arbitrary database."},{"lang":"es","value":"MongoDB v2.4.x anterior a v2.4.5 y v2.5.x anterior a v2.5.1 permite a usuarios autenticados remotamente obtener privilegios aprovechando el nombre de usuario de __sytem en cualquier base de datos."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mongodb:mongodb:2.4.0:*:*:*:*:*:*:*","matchCriteriaId":"FB2A001B-D790-4DEA-9420-6BD18F1D0BFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mongodb:mongodb:2.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AD7C03C0-5B7B-4808-8F50-1D5517CEF61F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mongodb:mongodb:2.4.2:*:*:*:*:*:*:*","matchCriteriaId":"C37483C2-DA83-4BE4-9960-5A691661670B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mongodb:mongodb:2.4.3:*:*:*:*:*:*:*","matchCriteriaId":"039B2CC3-CB74-4ADE-BEEF-65A5A0C4F6E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mongodb:mongodb:2.4.4:*:*:*:*:*:*:*","matchCriteriaId":"86DB7435-C47E-426E-B3A6-216089F4CCAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mongodb:mongodb:2.5.0:*:*:*:*:*:*:*","matchCriteriaId":"D142852D-DF64-4AE5-97A4-FAA0EF3A8AB8"}]}]}],"references":[{"url":"http://www.mongodb.org/about/alerts/","source":"cve@mitre.org"},{"url":"https://jira.mongodb.org/browse/SERVER-9983","source":"cve@mitre.org"},{"url":"http://www.mongodb.org/about/alerts/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://jira.mongodb.org/browse/SERVER-9983","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}