Vulnerabilidades do Progress Software MarkLogic Server

CVE-2026-85976 Média · 5.4 CWE-113 12/10/2026

HTTP response splitting in Progress MarkLogic Server Query Console

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently sanitize input used by the Query Console file-exploration endpoint, which could allow HTTP response splitting and unintended client-side response handling.

CVE-2026-85975 Alta · 7.5 CWE-319 12/10/2026

Cleartext transmission in Progress MarkLogic Server Amazon S3 connections

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may use cleartext transport for Amazon S3 connections by default. A network-positioned attacker could intercept data or credentials transmitted through an affected connection.

CVE-2026-85974 Alta · 7.4 CWE-297 12/10/2026

Improper TLS hostname verification in Progress MarkLogic Server

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently validate TLS certificate hostnames for certain outbound connections. A network-positioned attacker could exploit this weakness to intercept or modify communications with an affected service.

CVE-2026-85973 Alta · 7.4 CWE-319 12/10/2026

Cleartext transmission in Progress MarkLogic Server cluster join operations

Progress MarkLogic Server 12.x releases before 12.1.0 may use cleartext transport for certain cluster-management communications. A network-positioned attacker could intercept or modify information transmitted through an affected connection.

CVE-2026-85972 Alta · 7.4 CWE-303 12/10/2026

Improper Kerberos server verification in Progress MarkLogic Server

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently verify the identity of a Kerberos authentication service in certain password-based authentication configurations. A network-positioned attacker could impersonate trusted authentication infrastructure, potentially resulting in unauthorized access or modification of protected data.

CVE-2026-85971 Alta · 7.1 CWE-732 12/10/2026

Incorrect log file permissions in Progress MarkLogic Server

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 assign overly permissive operating-system permissions to certain log files, which could allow a local user to read or alter log data. The corrected default permissions apply to newly created and rotated logs; existing logs retain their current permissions until remediated.

CVE-2026-85970 Alta · 7.1 CWE-611 12/10/2026

Improper XML external entity restriction in Progress MarkLogic Server

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 enable XML external entity processing by default in multiple server paths, which could allow crafted XML to cause server-side requests or disclosure of local files.

CVE-2026-85969 Alta · 7.1 CWE-787 12/10/2026

Out-of-bounds write in Progress MarkLogic Server

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an out-of-bounds write vulnerability in certain language-processing functionality. A remote authenticated attacker could exploit this vulnerability to cause server instability or limited modification of data.

CVE-2026-85968 Alta · 7.1 CWE-125 12/10/2026

Out-of-bounds read in Progress MarkLogic Server

Progress MarkLogic Server 12.x releases before 12.1.0 contain an out-of-bounds read vulnerability in certain query-processing functionality. A remote authenticated attacker could exploit this vulnerability to cause server instability or disclose limited information from process memory.

CVE-2026-85967 Média · 6.1 CWE-79 12/10/2026

Cross-site scripting in Progress MarkLogic Server

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain a cross-site scripting vulnerability that could allow a remote attacker to execute script in the context of an authenticated user's browser session, which could result in unauthorized actions or disclosure of information accessible to that user.

CVE-2026-85966 Alta · 7.7 CWE-200 12/10/2026

Exposure of sensitive information in Progress MarkLogic Server

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently restrict access to certain security-sensitive information. A remote authenticated attacker with limited management permissions could obtain this information, which could result in unauthorized access to protected resources.

CVE-2026-85965 Alta · 8.0 CWE-416 12/10/2026

Use-after-free in Progress MarkLogic Server JavaScript engine integration

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain memory-safety defects in the JavaScript engine integration that could result in memory corruption, controlled process failure, or server instability.

CVE-2026-85964 Alta · 7.7 CWE-22 12/10/2026

Path traversal in Progress MarkLogic Server Query Console

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow an authenticated Query Console user to supply unsafe path values to a privileged filesystem helper, which could result in disclosure of arbitrary server files.

CVE-2026-85963 Alta · 7.5 CWE-321 12/10/2026

Server-side request forgery and hard-coded key in Progress MarkLogic Server OpsDirector

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 include deprecated OpsDirector functionality with weaknesses that could allow an unauthenticated remote attacker to make unauthorized requests to internal services or forge trusted requests, potentially resulting in unauthorized access to protected information.

CVE-2026-85962 Alta · 7.5 CWE-287 12/10/2026

Improper authentication in Progress MarkLogic Server SAML processing

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an improper authentication vulnerability in SAML processing. In deployments that use SAML authentication, an unauthenticated remote attacker could cause the affected server to accept an assertion that should be rejected, potentially resulting in unauthorized access.

CVE-2026-85961 Alta · 7.5 CWE-532 12/10/2026

Sensitive information exposure in Progress MarkLogic Server Azure deployments

On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in diagnostic logs under certain configurations. An attacker with access to the affected logs could use this information to obtain unauthorized access to protected cloud resources.

CVE-2026-85960 Alta · 7.5 CWE-352 12/10/2026

Cross-site request forgery in Progress MarkLogic Server Query Console

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 use predictable CSRF tokens in Query Console. A remote attacker who lures an authenticated Query Console user to a malicious page could submit unauthorized requests and execute server-side code with the victim's permissions.

CVE-2026-85959 Alta · 7.5 CWE-778 12/10/2026

Insufficient authentication logging in Progress MarkLogic Server

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently record successful authentication events in audit logs, which could limit customers' ability to detect and investigate unauthorized access or credential misuse.

CVE-2026-85958 Alta · 7.5 CWE-287 12/10/2026

Improper OAuth token validation in Progress MarkLogic Server

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authentication validation weakness that could allow an attacker to use a token that should not be accepted by the affected server, which could result in unauthorized access.

CVE-2026-85957 Alta · 7.5 CWE-611 12/10/2026

Improper XML external entity restriction in Progress MarkLogic Server SAML processing

Affected Progress MarkLogic Server 11.x releases before 11.3.7 use a SAML parser configuration that can process external DTDs or entities, which could result in unintended network access or information disclosure.

CVE-2026-9191 Crítica · 9.6 CWE-346 12/10/2026

Insufficient isolation of user-supplied code in Progress MarkLogic Server

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently isolate user-supplied code executed through certain REST and XDBC evaluation paths from HTTP request, response, and session state. An attacker able to execute code through an affected path could perform unauthorized actions or compromise an authenticated session.

CVE-2026-85956 Crítica · 9.6 CWE-269 12/10/2026

Progress MarkLogic Server - gerenciamento impróprio de privilégios em backup e restauração

As versões do Progress MarkLogic Server 12.x anteriores à 12.1.0 e as versões 11.x anteriores à 11.3.7 permitem que um atacante remoto com privilégios delegados de administrador de banco de dados execute operações de backup ou restauração em florestas fora do escopo autorizado do banco de dados, o que pode resultar em acesso não autorizado ou modificação de dados críticos para a segurança.

CVE-2026-85955 Crítica · 9.9 CWE-269 12/10/2026

Gerenciamento inadequado de privilégios no Progress MarkLogic Server na avaliação de XQuery

O Progress MarkLogic Server nas versões 12.x anteriores à 12.1.0 e nas versões 11.x anteriores à 11.3.7 permite que um atacante remoto com acesso de execução de consultas invoque uma função de avaliação de XQuery sem o privilégio adicional de avaliação exigido, o que pode resultar em execução de código no lado do servidor com permissões elevadas.

CVE-2026-85954 Alta · 8.6 CWE-269 12/10/2026

Improper privilege management in Progress MarkLogic Server higher-order XQuery functions

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 can evaluate user-controlled values supplied to certain higher-order XQuery functions in an elevated security context, which could result in privilege escalation beyond the attacker's granted permissions.

CVE-2026-85953 Alta · 8.5 CWE-22 12/10/2026

Path traversal and privilege management flaws in Progress MarkLogic Server InfoStudio

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain privileged legacy InfoStudio modules that do not sufficiently validate user-controlled file paths and user-context values. Exploitation could result in unauthorized access to server files or execution under an unintended identity.