What’s Vulnerable › Products

Progress Software Corporation MarkLogic Server vulnerabilities

41 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 41 published in the last 12 months.

Check whether your Progress Software Corporation MarkLogic Server version is affected

Latest Progress Software Corporation MarkLogic Server vulnerabilities

• CVE-2026-85976 — HTTP response splitting in Progress MarkLogic Server Query Console (CVSS 5.4)
• CVE-2026-85975 — Cleartext transmission in Progress MarkLogic Server Amazon S3 connections (CVSS 7.5)
• CVE-2026-85974 — Improper TLS hostname verification in Progress MarkLogic Server (CVSS 7.4)
• CVE-2026-85973 — Cleartext transmission in Progress MarkLogic Server cluster join operations (CVSS 7.4)
• CVE-2026-85972 — Improper Kerberos server verification in Progress MarkLogic Server (CVSS 7.4)
• CVE-2026-85971 — Incorrect log file permissions in Progress MarkLogic Server (CVSS 7.1)
• CVE-2026-85970 — Improper XML external entity restriction in Progress MarkLogic Server (CVSS 7.1)
• CVE-2026-85969 — Out-of-bounds write in Progress MarkLogic Server (CVSS 7.1)
• CVE-2026-85968 — Out-of-bounds read in Progress MarkLogic Server (CVSS 7.1)
• CVE-2026-85967 — Cross-site scripting in Progress MarkLogic Server (CVSS 6.1)
• CVE-2026-85966 — Exposure of sensitive information in Progress MarkLogic Server (CVSS 7.7)
• CVE-2026-85965 — Use-after-free in Progress MarkLogic Server JavaScript engine integration (CVSS 8.0)
• CVE-2026-85964 — Path traversal in Progress MarkLogic Server Query Console (CVSS 7.7)
• CVE-2026-85963 — Server-side request forgery and hard-coded key in Progress MarkLogic Server OpsDirector (CVSS 7.5)
• CVE-2026-85962 — Improper authentication in Progress MarkLogic Server SAML processing (CVSS 7.5)
• CVE-2026-85961 — Sensitive information exposure in Progress MarkLogic Server Azure deployments (CVSS 7.5)
• CVE-2026-85960 — Cross-site request forgery in Progress MarkLogic Server Query Console (CVSS 7.5)
• CVE-2026-85959 — Insufficient authentication logging in Progress MarkLogic Server (CVSS 7.5)
• CVE-2026-85958 — Improper OAuth token validation in Progress MarkLogic Server (CVSS 7.5)
• CVE-2026-85957 — Improper XML external entity restriction in Progress MarkLogic Server SAML processing (CVSS 7.5)
• CVE-2026-9191 — Insufficient isolation of user-supplied code in Progress MarkLogic Server (CVSS 9.6)
• CVE-2026-85956 — Improper privilege management in Progress MarkLogic Server backup and restore operations (CVSS 9.6)
• CVE-2026-85955 — Improper privilege management in Progress MarkLogic Server xdmp:eval-in (CVSS 9.9)
• CVE-2026-85954 — Improper privilege management in Progress MarkLogic Server higher-order XQuery functions (CVSS 8.6)
• CVE-2026-85953 — Path traversal and privilege management flaws in Progress MarkLogic Server InfoStudio (CVSS 8.5)