Threats Tagged 'ghsa-qffv-m2j8-84wx'

1 threat

Threats Tagged 'ghsa-qffv-m2j8-84wx'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.9	EPSS 0.3%	CVE-2026-85948MarkLogic Server · Improper Privilege Management Critical9.9EPSS 0.3%2026-10-12CVE Database V5CVE-2026-85948 Progress MarkLogic Server versions 11.0.0 up to but not including 11.3.7, and 12.0.0 up to but not including 12.1.0, contain an XQuery injection vulnerability in a deprecated Management API package path. This flaw allows a remote attacker with manage-user-level privileges to gain persistent unauthorized administrative control. The vulnerability is classified as improper privilege management (CWE-269) and has a critical severity with a CVSS score of 9.9. EPSS 0.3%Vulnerability Progress Software Corporation #cwe-269 #ghsa-qffv-m2j8-84wx	CVE Database V5	2026-10-12

Showing 1–1 of 1 result