# Progress Software Corporation MarkLogic Server.

Every CVE that names Progress Software Corporation MarkLogic Server among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [HTTP response splitting in Progress MarkLogic Server Query Console](https://agentprime.io/advisories/CVE-2026-85976.md)
  `CVE-2026-85976` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 5.4 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Other injection
- [Cleartext transmission in Progress MarkLogic Server Amazon S3 connections](https://agentprime.io/advisories/CVE-2026-85975.md)
  `CVE-2026-85975` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 7.5 High · Not analysed yet · Published 12 Oct 2026 · Tags: Weak cryptography or TLS
- [Improper TLS hostname verification in Progress MarkLogic Server](https://agentprime.io/advisories/CVE-2026-85974.md)
  `CVE-2026-85974` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 7.4 High · Not analysed yet · Published 12 Oct 2026 · Tags: Weak cryptography or TLS
- [Cleartext transmission in Progress MarkLogic Server cluster join operations](https://agentprime.io/advisories/CVE-2026-85973.md)
  `CVE-2026-85973` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 7.4 High · Not analysed yet · Published 12 Oct 2026 · Tags: Weak cryptography or TLS
- [Improper Kerberos server verification in Progress MarkLogic Server](https://agentprime.io/advisories/CVE-2026-85972.md)
  `CVE-2026-85972` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 7.4 High · Not analysed yet · Published 12 Oct 2026 · Tags: Authentication bypass
- [Incorrect log file permissions in Progress MarkLogic Server](https://agentprime.io/advisories/CVE-2026-85971.md)
  `CVE-2026-85971` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 7.1 High · Not analysed yet · Published 12 Oct 2026 · Tags: Broken access control
- [Improper XML external entity restriction in Progress MarkLogic Server](https://agentprime.io/advisories/CVE-2026-85970.md)
  `CVE-2026-85970` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 7.1 High · Not analysed yet · Published 12 Oct 2026 · Tags: XML external entities (XXE)
- [Out-of-bounds write in Progress MarkLogic Server](https://agentprime.io/advisories/CVE-2026-85969.md)
  `CVE-2026-85969` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 7.1 High · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption
- [Out-of-bounds read in Progress MarkLogic Server](https://agentprime.io/advisories/CVE-2026-85968.md)
  `CVE-2026-85968` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 7.1 High · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption
- [Cross-site scripting in Progress MarkLogic Server](https://agentprime.io/advisories/CVE-2026-85967.md)
  `CVE-2026-85967` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 6.1 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Exposure of sensitive information in Progress MarkLogic Server](https://agentprime.io/advisories/CVE-2026-85966.md)
  `CVE-2026-85966` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 7.7 High · Not analysed yet · Published 12 Oct 2026 · Tags: Information disclosure
- [Use-after-free in Progress MarkLogic Server JavaScript engine integration](https://agentprime.io/advisories/CVE-2026-85965.md)
  `CVE-2026-85965` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 8.0 High · Not analysed yet · Published 12 Oct 2026 · Tags: Memory corruption
- [Path traversal in Progress MarkLogic Server Query Console](https://agentprime.io/advisories/CVE-2026-85964.md)
  `CVE-2026-85964` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 7.7 High · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal
- [Server-side request forgery and hard-coded key in Progress MarkLogic Server OpsDirector](https://agentprime.io/advisories/CVE-2026-85963.md)
  `CVE-2026-85963` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 7.5 High · Not analysed yet · Published 12 Oct 2026 · Tags: Hard-coded credentials, Server-side request forgery (SSRF)
- [Improper authentication in Progress MarkLogic Server SAML processing](https://agentprime.io/advisories/CVE-2026-85962.md)
  `CVE-2026-85962` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 7.5 High · Not analysed yet · Published 12 Oct 2026 · Tags: Authentication bypass, Weak cryptography or TLS
- [Sensitive information exposure in Progress MarkLogic Server Azure deployments](https://agentprime.io/advisories/CVE-2026-85961.md)
  `CVE-2026-85961` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 7.5 High · Not analysed yet · Published 12 Oct 2026 · Tags: Information disclosure
- [Cross-site request forgery in Progress MarkLogic Server Query Console](https://agentprime.io/advisories/CVE-2026-85960.md)
  `CVE-2026-85960` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 7.5 High · Not analysed yet · Published 12 Oct 2026 · Tags: Cross-site request forgery (CSRF)
- [Insufficient authentication logging in Progress MarkLogic Server](https://agentprime.io/advisories/CVE-2026-85959.md)
  `CVE-2026-85959` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 7.5 High · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-778
- [Improper OAuth token validation in Progress MarkLogic Server](https://agentprime.io/advisories/CVE-2026-85958.md)
  `CVE-2026-85958` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 7.5 High · Not analysed yet · Published 12 Oct 2026 · Tags: Authentication bypass
- [Improper XML external entity restriction in Progress MarkLogic Server SAML processing](https://agentprime.io/advisories/CVE-2026-85957.md)
  `CVE-2026-85957` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 7.5 High · Not analysed yet · Published 12 Oct 2026 · Tags: XML external entities (XXE)
- [Improper privilege management in Progress MarkLogic Server backup and restore operations](https://agentprime.io/advisories/CVE-2026-85956.md)
  `CVE-2026-85956` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Privilege escalation
- [Improper privilege management in Progress MarkLogic Server xdmp:eval-in](https://agentprime.io/advisories/CVE-2026-85955.md)
  `CVE-2026-85955` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Privilege escalation
- [Improper privilege management in Progress MarkLogic Server higher-order XQuery functions](https://agentprime.io/advisories/CVE-2026-85954.md)
  `CVE-2026-85954` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 8.6 High · Not analysed yet · Published 12 Oct 2026 · Tags: Privilege escalation
- [Path traversal and privilege management flaws in Progress MarkLogic Server InfoStudio](https://agentprime.io/advisories/CVE-2026-85953.md)
  `CVE-2026-85953` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 8.5 High · Not analysed yet · Published 12 Oct 2026 · Tags: Path traversal, Privilege escalation
- [Server-side request forgery in Progress MarkLogic Server Linux cloud deployments](https://agentprime.io/advisories/CVE-2026-85952.md)
  `CVE-2026-85952` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 8.5 High · Not analysed yet · Published 12 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in Progress MarkLogic Server Azure deployments](https://agentprime.io/advisories/CVE-2026-85951.md)
  `CVE-2026-85951` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 8.5 High · Not analysed yet · Published 12 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Improper privilege management in Progress MarkLogic Server REST extensions](https://agentprime.io/advisories/CVE-2026-85950.md)
  `CVE-2026-85950` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 8.4 High · Not analysed yet · Published 12 Oct 2026 · Tags: Privilege escalation
- [Sensitive information exposure in Progress MarkLogic Server trace logs](https://agentprime.io/advisories/CVE-2026-85949.md)
  `CVE-2026-85949` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 8.1 High · Not analysed yet · Published 12 Oct 2026 · Tags: Information disclosure
- [Improper privilege management in Progress MarkLogic Server Management API](https://agentprime.io/advisories/CVE-2026-85948.md)
  `CVE-2026-85948` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Privilege escalation
- [Improper privilege management in Progress MarkLogic Server forest operations](https://agentprime.io/advisories/CVE-2026-85947.md)
  `CVE-2026-85947` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Privilege escalation
- [Insufficient isolation of user-supplied code in Progress MarkLogic Server](https://agentprime.io/advisories/CVE-2026-9191.md)
  `CVE-2026-9191` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-346
- [Server-side request forgery in Progress MarkLogic Server](https://agentprime.io/advisories/CVE-2026-9203.md)
  `CVE-2026-9203` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 8.5 High · Not analysed yet · Published 5 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Cross-site scripting in Progress MarkLogic Server Query Console](https://agentprime.io/advisories/CVE-2026-9195.md)
  `CVE-2026-9195` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Aug 2026 · Tags: Path traversal, Cross-site scripting (XSS)
- [Privilege escalation in Progress MarkLogic Server Hadoop integration](https://agentprime.io/advisories/CVE-2026-9193.md)
  `CVE-2026-9193` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Aug 2026 · Tags: Privilege escalation
- [Authentication bypass in Progress MarkLogic Server ODBC App Server](https://agentprime.io/advisories/CVE-2026-9192.md)
  `CVE-2026-9192` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Aug 2026 · Tags: Authentication bypass
- [HTTP request smuggling in Progress MarkLogic Server](https://agentprime.io/advisories/CVE-2026-9190.md)
  `CVE-2026-9190` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Aug 2026 · Tags: HTTP request smuggling
- [Privilege escalation in Progress MarkLogic Server REST document patch operation](https://agentprime.io/advisories/CVE-2026-8709.md)
  `CVE-2026-8709` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Aug 2026 · Tags: Privilege escalation
- [SAML authentication bypass in Progress MarkLogic Server](https://agentprime.io/advisories/CVE-2026-7557.md)
  `CVE-2026-7557` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Aug 2026 · Tags: Weak cryptography or TLS
- [Privilege escalation in Progress MarkLogic Server REST query interfaces](https://agentprime.io/advisories/CVE-2026-7329.md)
  `CVE-2026-7329` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Aug 2026 · Tags: Privilege escalation
- [Privilege escalation in Progress MarkLogic Server REST API document processing](https://agentprime.io/advisories/CVE-2026-7327.md)
  `CVE-2026-7327` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 8.1 High · Not analysed yet · Published 5 Aug 2026 · Tags: Privilege escalation
- [Cross-site request forgery in Progress MarkLogic Server Admin UI](https://agentprime.io/advisories/CVE-2026-7326.md)
  `CVE-2026-7326` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 7.5 High · Not analysed yet · Published 5 Aug 2026 · Tags: Cross-site request forgery (CSRF)

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=progress-software-corporation-marklogic-server>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/progress-software-corporation-marklogic-server/>. Everything for agents: <https://agentprime.io/llms.txt>.