MongoDB 未经认证未初始化的堆内存泄漏 (MongoBleed)CVE-2025-14847直接检查

high Nessus 插件 ID 282478

语言：

版本 1.10 Apr 13, 2026, 4:17 PM Detection (Cipher inventory improvements) Plugin Feed: 202604131617
版本 1.9 Apr 6, 2026, 3:39 PM New Plugin Feed: 202604061539
版本 1.7 Mar 9, 2026, 5:15 PM Plugin requirements (Added new scan preference, "Report potential vulnerabilities (components)", so users can decide if they want to scan component installs for potential vulnerabilities.) Plugin Feed: 202603091715
版本 1.6 Feb 25, 2026, 1:08 AM IAVM reference Plugin Feed: 202602250108
版本 1.5 Feb 17, 2026, 9:07 AM Exploit attributes ("Exploit framework core" set to "True") Plugin Feed: 202602170907
版本 1.4 Feb 6, 2026, 12:54 AM Required Scan configuration (Detected software that is considered a component of another application should only trigger vuln findings when the scan is running in paranoid mode. At this moment in time, this change affects only OpenSSL, Curl, LibCurl , SQLite, PHP, Apache HTTPD and Tomcat. Others may follow at a later date.) Plugin Feed: 202602060054
版本 1.3 Jan 19, 2026, 11:21 AM Detection Plugin Feed: 202601191121
版本 1.2 Jan 13, 2026, 2:35 AM CISA reference CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:A") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" set to "Exploits are available") Plugin Feed: 202601130235
版本 1.1 Jan 8, 2026, 11:25 PM New Plugin Feed: 202601082325

* Changelogs are generally available for changes made after Nov 1, 2022