Marklogic Server (Progress) - vulnerabilities (CVEs)
10 CVEs, 0 in the last 30 days, 65 known versions, newest CVE from 2026-08-05. Vendor: Progress.
CVEs of Marklogic Server
- CVE-2026-9203 - CVSS 8.5 (high), 2026-08-05: A server-side request forgery vulnerability in Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with low-privileged roles to…
- CVE-2026-9195 - CVSS 9.3 (critical), 2026-08-05: A cross-site scripting vulnerability in the Query Console of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker who lures an…
- CVE-2026-9193 - CVSS 9.9 (critical), 2026-08-05: An improper privilege management vulnerability in the Hadoop integration of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user…
- CVE-2026-9192 - CVSS 9.8 (critical), 2026-08-05: An authentication bypass vulnerability in the ODBC App Server of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an unauthenticated remote attacker…
- CVE-2026-9190 - CVSS 9.1 (critical), 2026-08-05: An HTTP request smuggling vulnerability in the HTTP App Server of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker to bypass…
- CVE-2026-8709 - CVSS 9.9 (critical), 2026-08-05: An improper privilege management vulnerability in the REST API document patch operation of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an…
- CVE-2026-7557 - CVSS 9.1 (critical), 2026-08-05: An improper verification of cryptographic signature vulnerability in the SAML authentication module of Progress MarkLogic Server before 11.3.6 and 12.0.3…
- CVE-2026-7329 - CVSS 9.9 (critical), 2026-08-05: An improper privilege management vulnerability in the SQL, SPARQL, and Optic REST query interfaces of Progress MarkLogic Server before 11.3.6 and 12.0.3…
- CVE-2026-7327 - CVSS 8.1 (high), 2026-08-05: An improper privilege management vulnerability in the REST API document processing pipeline of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an…
- CVE-2026-7326 - CVSS 8.8 (high), 2026-08-05: A cross-site request forgery vulnerability in the Admin UI of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker who lures an…
