An unauthenticated user with network access to the Ops Manager web port can repeatedly request monitoring endpoints that perform costly work without rate limiting. This can temporarily slow other traffic served by the same process while requests continue.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://www.mongodb.com/docs/ops-manager/current/release-notes/application/#ops-manager-server-8027 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 3
- Cpes+1 CPE criteria (now 1)NVD modified 2026-10-15 18:25
- StatusUndergoing Analysis → AnalyzedNVD modified 2026-10-15 18:25
- First seenCVSS 6.9NVD modified 2026-10-13 18:17
Affected (CPE criteria) 1
cpe:2.3:a:mongodb:ops_manager:*:*:*:*:*:*:*:*