Advisories · Technology
Progress Software Corporation MarkLogic Server.
Every CVE that names Progress Software Corporation MarkLogic Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.4 Medium
HTTP response splitting in Progress MarkLogic Server Query Console
- Progress Software Corporation MarkLogic Server
- Other injection
- CVSS 7.5 High
Cleartext transmission in Progress MarkLogic Server Amazon S3 connections
- Progress Software Corporation MarkLogic Server
- Weak cryptography or TLS
- CVSS 7.4 High
Improper TLS hostname verification in Progress MarkLogic Server
- Progress Software Corporation MarkLogic Server
- Weak cryptography or TLS
- CVSS 7.4 High
Cleartext transmission in Progress MarkLogic Server cluster join operations
- Progress Software Corporation MarkLogic Server
- Weak cryptography or TLS
- CVSS 7.4 High
Improper Kerberos server verification in Progress MarkLogic Server
- Progress Software Corporation MarkLogic Server
- Authentication bypass
- CVSS 7.1 High
Incorrect log file permissions in Progress MarkLogic Server
- Progress Software Corporation MarkLogic Server
- Broken access control
- CVSS 7.1 High
Improper XML external entity restriction in Progress MarkLogic Server
- Progress Software Corporation MarkLogic Server
- XML external entities (XXE)
- CVSS 7.1 High
Out-of-bounds write in Progress MarkLogic Server
- Progress Software Corporation MarkLogic Server
- Memory corruption
- CVSS 7.1 High
Out-of-bounds read in Progress MarkLogic Server
- Progress Software Corporation MarkLogic Server
- Memory corruption
- CVSS 6.1 Medium
Cross-site scripting in Progress MarkLogic Server
- Progress Software Corporation MarkLogic Server
- Cross-site scripting (XSS)
- CVSS 7.7 High
Exposure of sensitive information in Progress MarkLogic Server
- Progress Software Corporation MarkLogic Server
- Information disclosure
- CVSS 8.0 High
Use-after-free in Progress MarkLogic Server JavaScript engine integration
- Progress Software Corporation MarkLogic Server
- Memory corruption
- CVSS 7.7 High
Path traversal in Progress MarkLogic Server Query Console
- Progress Software Corporation MarkLogic Server
- Path traversal
- CVSS 7.5 High
Server-side request forgery and hard-coded key in Progress MarkLogic Server OpsDirector
- Progress Software Corporation MarkLogic Server
- Hard-coded credentials
- Server-side request forgery (SSRF)
- CVSS 7.5 High
Improper authentication in Progress MarkLogic Server SAML processing
- Progress Software Corporation MarkLogic Server
- Authentication bypass
- Weak cryptography or TLS
- CVSS 7.5 High
Sensitive information exposure in Progress MarkLogic Server Azure deployments
- Progress Software Corporation MarkLogic Server
- Information disclosure
- CVSS 7.5 High
Cross-site request forgery in Progress MarkLogic Server Query Console
- Progress Software Corporation MarkLogic Server
- Cross-site request forgery (CSRF)
- CVSS 7.5 High
Insufficient authentication logging in Progress MarkLogic Server
- Progress Software Corporation MarkLogic Server
- CWE-778
- CVSS 7.5 High
Improper OAuth token validation in Progress MarkLogic Server
- Progress Software Corporation MarkLogic Server
- Authentication bypass
- CVSS 7.5 High
Improper XML external entity restriction in Progress MarkLogic Server SAML processing
- Progress Software Corporation MarkLogic Server
- XML external entities (XXE)
- CVSS 9.6 CriticalCritical · CVSS 9+
Improper privilege management in Progress MarkLogic Server backup and restore operations
- Progress Software Corporation MarkLogic Server
- Privilege escalation
- CVSS 9.9 CriticalCritical · CVSS 9+
Improper privilege management in Progress MarkLogic Server xdmp:eval-in
- Progress Software Corporation MarkLogic Server
- Privilege escalation
- CVSS 8.6 High
Improper privilege management in Progress MarkLogic Server higher-order XQuery functions
- Progress Software Corporation MarkLogic Server
- Privilege escalation
- CVSS 8.5 High
Path traversal and privilege management flaws in Progress MarkLogic Server InfoStudio
- Progress Software Corporation MarkLogic Server
- Path traversal
- Privilege escalation
- CVSS 8.5 High
Server-side request forgery in Progress MarkLogic Server Linux cloud deployments
- Progress Software Corporation MarkLogic Server
- Server-side request forgery (SSRF)
- CVSS 8.5 High
Server-side request forgery in Progress MarkLogic Server Azure deployments
- Progress Software Corporation MarkLogic Server
- Server-side request forgery (SSRF)
- CVSS 8.4 High
Improper privilege management in Progress MarkLogic Server REST extensions
- Progress Software Corporation MarkLogic Server
- Privilege escalation
- CVSS 8.1 High
Sensitive information exposure in Progress MarkLogic Server trace logs
- Progress Software Corporation MarkLogic Server
- Information disclosure
- CVSS 9.9 CriticalCritical · CVSS 9+
Improper privilege management in Progress MarkLogic Server Management API
- Progress Software Corporation MarkLogic Server
- Privilege escalation
- CVSS 9.9 CriticalCritical · CVSS 9+
Improper privilege management in Progress MarkLogic Server forest operations
- Progress Software Corporation MarkLogic Server
- Privilege escalation
- CVSS 9.6 CriticalCritical · CVSS 9+
Insufficient isolation of user-supplied code in Progress MarkLogic Server
- Progress Software Corporation MarkLogic Server
- CWE-346
- CVSS 8.5 High
Server-side request forgery in Progress MarkLogic Server
- Progress Software Corporation MarkLogic Server
- Server-side request forgery (SSRF)
- CVSS 9.3 CriticalCritical · CVSS 9+
Cross-site scripting in Progress MarkLogic Server Query Console
- Progress Software Corporation MarkLogic Server
- Path traversal
- Cross-site scripting (XSS)
- CVSS 9.9 CriticalCritical · CVSS 9+
Privilege escalation in Progress MarkLogic Server Hadoop integration
- Progress Software Corporation MarkLogic Server
- Privilege escalation
- CVSS 9.8 CriticalCritical · CVSS 9+
Authentication bypass in Progress MarkLogic Server ODBC App Server
- Progress Software Corporation MarkLogic Server
- Authentication bypass
- CVSS 9.1 CriticalCritical · CVSS 9+
HTTP request smuggling in Progress MarkLogic Server
- Progress Software Corporation MarkLogic Server
- HTTP request smuggling
- CVSS 9.9 CriticalCritical · CVSS 9+
Privilege escalation in Progress MarkLogic Server REST document patch operation
- Progress Software Corporation MarkLogic Server
- Privilege escalation
- CVSS 9.1 CriticalCritical · CVSS 9+
SAML authentication bypass in Progress MarkLogic Server
- Progress Software Corporation MarkLogic Server
- Weak cryptography or TLS
- CVSS 9.9 CriticalCritical · CVSS 9+
Privilege escalation in Progress MarkLogic Server REST query interfaces
- Progress Software Corporation MarkLogic Server
- Privilege escalation
- CVSS 8.1 High
Privilege escalation in Progress MarkLogic Server REST API document processing
- Progress Software Corporation MarkLogic Server
- Privilege escalation
- CVSS 7.5 High
Cross-site request forgery in Progress MarkLogic Server Admin UI
- Progress Software Corporation MarkLogic Server
- Cross-site request forgery (CSRF)