Skip to content
OpenAdvisories

Product · Progress Software

MarkLogic Server

41 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-85976

    HTTP response splitting in Progress MarkLogic Server Query Console

    Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently sanitize input used by the Query Console file-exploration endpoint, which could allow HTTP response splitting and unintended client-side response handlin…

    Progress Software MarkLogic Server
  • Medium 6.1
    CVE-2026-85967

    Cross-site scripting in Progress MarkLogic Server

    Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain a cross-site scripting vulnerability that could allow a remote attacker to execute script in the context of an authenticated user's browser session, which could resu…

    Progress Software MarkLogic Server