Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

MarkLogic Server — Vulnerabilities & Security Advisories 41

All 41 CVE vulnerabilities found in MarkLogic Server, with AI-generated Chinese analysis, references, and POCs.

This page aggregates common vulnerability weaknesses associated with MarkLogic Server, a robust document-oriented database management system developed by MarkLogic Corporation. It collects data regarding security flaws, including but not limited to buffer overflows, injection attacks, and improper access control issues, covering incidents reported from 2010 through the present. By browsing this resource, you can track vendor advisories issued by MarkLogic to address specific security concerns, understand the characteristics and impact of various weakness classes within database environments, and look up a product's vulnerability history to assess long-term security posture and remediation trends. The compilation focuses on providing a comprehensive view of how MarkLogic Server has been affected by external threats and internal misconfigurations over time. This allows security professionals and administrators to identify patterns in defect reporting, compare severity levels across different versions, and prioritize patching efforts based on historical data. The information is structured to facilitate efficient research without requiring manual aggregation of disparate sources. Users can analyze how specific architectural choices in MarkLogic have influenced its susceptibility to certain attack vectors. This approach supports proactive risk management by offering insights into the lifecycle of security defects within the product family. The data serves as a reference for evaluating the effectiveness of past security updates and anticipating potential future issues based on established trends. All entries are categorized to help users quickly locate relevant information regarding specific vulnerability types or time periods of interest.

Vendor: Progress Software Corporation

CVE ID Title CVSS Severity Published
CVE-2026-85976 HTTP response splitting in Progress MarkLogic Server Query Console CWE-113 5.4 Medium 2026-10-12
CVE-2026-85975 Cleartext transmission in Progress MarkLogic Server Amazon S3 connections CWE-319 7.5 High 2026-10-12
CVE-2026-85974 Improper TLS hostname verification in Progress MarkLogic Server CWE-297 7.4 High 2026-10-12
CVE-2026-85973 Cleartext transmission in Progress MarkLogic Server cluster join operations CWE-319 7.4 High 2026-10-12
CVE-2026-85972 Improper Kerberos server verification in Progress MarkLogic Server CWE-303 7.4 High 2026-10-12
CVE-2026-85971 Incorrect log file permissions in Progress MarkLogic Server CWE-732 7.1 High 2026-10-12
CVE-2026-85970 Improper XML external entity restriction in Progress MarkLogic Server CWE-611 7.1 High 2026-10-12
CVE-2026-85969 Out-of-bounds write in Progress MarkLogic Server CWE-787 7.1 High 2026-10-12
CVE-2026-85968 Out-of-bounds read in Progress MarkLogic Server CWE-125 7.1 High 2026-10-12
CVE-2026-85967 Cross-site scripting in Progress MarkLogic Server CWE-79 6.1 Medium 2026-10-12
CVE-2026-85966 Exposure of sensitive information in Progress MarkLogic Server CWE-200 7.7 High 2026-10-12
CVE-2026-85965 Use-after-free in Progress MarkLogic Server JavaScript engine integration CWE-416 8.0 High 2026-10-12
CVE-2026-85964 Path traversal in Progress MarkLogic Server Query Console CWE-22 7.7 High 2026-10-12
CVE-2026-85963 Server-side request forgery and hard-coded key in Progress MarkLogic Server OpsDirector CWE-918 7.5 High 2026-10-12
CVE-2026-85962 Improper authentication in Progress MarkLogic Server SAML processing CWE-287 7.5 High 2026-10-12
CVE-2026-85961 Sensitive information exposure in Progress MarkLogic Server Azure deployments CWE-532 7.5 High 2026-10-12
CVE-2026-85960 Cross-site request forgery in Progress MarkLogic Server Query Console CWE-352 7.5 High 2026-10-12
CVE-2026-85959 Insufficient authentication logging in Progress MarkLogic Server CWE-778 7.5 High 2026-10-12
CVE-2026-85958 Improper OAuth token validation in Progress MarkLogic Server CWE-287 7.5 High 2026-10-12
CVE-2026-85957 Improper XML external entity restriction in Progress MarkLogic Server SAML processing CWE-611 7.5 High 2026-10-12
CVE-2026-85956 Improper privilege management in Progress MarkLogic Server backup and restore operations CWE-269 9.6 Critical 2026-10-12
CVE-2026-85955 Improper privilege management in Progress MarkLogic Server xdmp:eval-in CWE-269 9.9 Critical 2026-10-12
CVE-2026-85954 Improper privilege management in Progress MarkLogic Server higher-order XQuery functions CWE-269 8.6 High 2026-10-12
CVE-2026-85953 Path traversal and privilege management flaws in Progress MarkLogic Server InfoStudio CWE-22 8.5 High 2026-10-12
CVE-2026-85952 Server-side request forgery in Progress MarkLogic Server Linux cloud deployments CWE-918 8.5 High 2026-10-12
CVE-2026-85951 Server-side request forgery in Progress MarkLogic Server Azure deployments CWE-918 8.5 High 2026-10-12
CVE-2026-85950 Improper privilege management in Progress MarkLogic Server REST extensions CWE-269 8.4 High 2026-10-12
CVE-2026-85949 Sensitive information exposure in Progress MarkLogic Server trace logs CWE-532 8.1 High 2026-10-12
CVE-2026-85948 Improper privilege management in Progress MarkLogic Server Management API CWE-269 9.9 Critical 2026-10-12
CVE-2026-85947 Improper privilege management in Progress MarkLogic Server forest operations CWE-269 9.9 Critical 2026-10-12

All 41 known CVE vulnerabilities affecting MarkLogic Server with full Chinese analysis, references, and POCs where available.