How To
Summary
In IBM® Design Room ONE® (DR ONE), how can you upgrade an existing installation of MongoDB to a version that is not affected by the CVE-2025-14847 vulnerability?
Objective
DR ONE is shipped with installation scripts that download and install MongoDB versions affected by the CVE-2025-14847 vulnerability. You would like to upgrade to a MongoDB version that is not affected by the CVE-2025-14847 vulnerability.
The following MongoDB versions are affected:
- MongoDB 8.2.0 through 8.2.3
- MongoDB 8.0.0 through 8.0.16
- MongoDB 7.0.0 through 7.0.26
- MongoDB 6.0.0 through 6.0.26
- MongoDB 5.0.0 through 5.0.31
- MongoDB 4.4.0 through 4.4.29
- All MongoDB Server v4.2 versions
- All MongoDB Server v4.0 versions
- All MongoDB Server v3.6 versions
The following MongoDB versions (or later) are not affected:
- MongoDB 8.2.3
- MongoDB 8.0.17
- MongoDB 7.0.28
- MongoDB 6.0.27
- MongoDB 5.0.32
- MongoDB 4.4.30
Environment
This information is only applicable to installations on Microsoft® Windows®. For installation on Linux, MongoDB is downloaded and installed manually.
Steps
1.Stop DR ONE - Installation_instructions > Using PM2 for Managing the Web Server
2.Stop the MongoDB Windows service
3.Back-up MongoDB's data, and optionally, logs folders, in order to be able to restore them if anything goes wrong
4.Navigate to the file [DR_server_install_dir]\DR_Install\dr-config.json and open it in a text editor
5.Find the property mongo_win_download_url
//URL from where to download Mongo
"mongo_win_download_url": "https://fastdl.mongodb.org/windows/mongodb-
windows-x86_64-6.0.10-signed.msi",6.Modify the URL to 6.0.27 (or later):
//URL from where to download Mongo
"mongo_win_download_url": "https://fastdl.mongodb.org/windows/mongodb-
windows-x86_64-6.0.27-signed.msi",7.Navigate to the DR_install directory in a Command Prompt and execute the commands:
node preinstall-dr.js (Answer yes to download)
8.Verify that the MongoDB .msi file was downloaded to ...\DR-Install\downloaded
node install-dr.js9.Start the MongoDB Windows service
10.Confirm the MongoDB version by using the cd command to mongo-install_dir\bin and confirming the new version with the mongod --version command
11.Start DR ONE
node deploy-dr.js
Document Location
Worldwide
Product Synonym
DR ONE
Was this topic helpful?
Document Information
Modified date:
25 February 2026
UID
ibm17261612