Threat Intelligence Database

Progress MarkLogic Server versions 12.x before 12.1.0 and 11.x before 11.3.7 have a vulnerability where they do not sufficiently verify the identity of a Kerberos authentication service in certain password-based authentication configurations. This flaw could allow a network-positioned attacker to impersonate trusted authentication infrastructure, potentially leading to unauthorized access or modification of protected data. The vulnerability has a high severity rating with a CVSS score of 7.4.

Progress MarkLogic Server versions 12.x prior to 12.1.0 and 11.x prior to 11.3.7 contain a vulnerability in the Query Console file-exploration endpoint where input is not sufficiently sanitized. This flaw could enable HTTP response splitting, potentially causing unintended client-side response handling. The vulnerability has a medium severity rating with a CVSS score of 5.4.

Progress MarkLogic Server versions 12.x prior to 12.1.0 may transmit certain cluster-management communications in cleartext. This vulnerability allows a network-positioned attacker to intercept or modify sensitive information exchanged within the cluster. The issue affects confidentiality and integrity of the data transmitted over the network.

Progress MarkLogic Server versions 12.x prior to 12.1.0 contain an out-of-bounds read vulnerability in query-processing functionality. This flaw allows a remote authenticated attacker to cause server instability or disclose limited information from process memory. The vulnerability has a high severity rating with a CVSS score of 7.1.

Progress MarkLogic Server versions 12.x before 12.1.0 and 11.x before 11.3.7 have memory-safety defects in their JavaScript engine integration. These defects can lead to memory corruption, controlled process failure, or server instability. The vulnerability is identified as CVE-2026-85965 and has a high severity rating with a CVSS score of 8. The issue affects the confidentiality, integrity, and availability of the server. No explicit patch links were provided, but fixed versions are indicated by the version boundaries.

Progress MarkLogic Server versions 12.x before 12.1.0 and 11.x before 11.3.7 have an out-of-bounds write vulnerability in certain language-processing functionality. This flaw allows a remote authenticated attacker to cause server instability or limited data modification. The vulnerability is identified as CVE-2026-85969 with a high severity score of 7.1. No information about available patches or vendor advisories is provided.

Progress MarkLogic Server versions 12.x before 12.1.0 and 11.x before 11.3.7 have XML external entity (XXE) processing enabled by default in multiple server paths. This configuration could allow specially crafted XML input to trigger server-side requests or disclose local files. The vulnerability is identified as CVE-2026-85970 with a high severity rating and a CVSS score of 7.1.

Progress Software Corporation MarkLogic Server versions 11.0.0 up to but not including 11.3.7 contain an XML External Entity (XXE) vulnerability due to improper restriction of XML external entity references in its SAML parser configuration. This flaw allows processing of external DTDs or entities, potentially leading to unintended network access or information disclosure. The vulnerability has a high severity rating with a CVSS score of 7.5. No known exploits are reported in the wild. The vendor has not provided explicit patch information in the input data.

Progress MarkLogic Server versions 12.x before 12.1.0 and 11.x before 11.3.7 include privileged legacy InfoStudio modules with insufficient validation of user-controlled file paths and user-context values. This vulnerability could allow unauthorized access to server files or execution of actions under an unintended identity. The issue is classified as a high severity vulnerability with a CVSS score of 8.5.

CVE-2026-85949 is a vulnerability in Progress Software Corporation's MarkLogic Server versions 11.x before 11.3.7 and 12.x before 12.1.0. Under certain configurations, the server may log security-sensitive information in diagnostic logs. An attacker with access to these logs could leverage this information to gain unauthorized access to protected resources. The vulnerability has a high severity score of 8.1 CVSS 3.1.