CVE-2026-85961

Progress MarkLogic Server versions 12.x before 12.1.0 and 11.x before 11.3.7 on Azure deployments may record security-sensitive authentication information in diagnostic logs under certain configurations. This exposure occurs due to the insertion of sensitive data into log files (CWE-532 ), potent...

EUVD-2026-97674

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 use predictable CSRF tokens in Query Console. A remote attacker who lures an authenticated Query Console user to a malicious page could submit unauthorized requests and execute server-side code with the victim's...

CVE-2026-85960 Cross-site request forgery in Progress MarkLogic Server Query Console

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 use predictable CSRF tokens in Query Console. A remote attacker who lures an authenticated Query Console user to a malicious page could submit unauthorized requests and execute server-side code with the victim's...

CVE-2026-85960

Progress MarkLogic Server (12.x before 12.1.0 and 11.x before 11.3.7) is vulnerable to a Cross-Site Request Forgery (CSRF) flaw in the Query Console due to the use of predictable CSRF tokens. A remote attacker could trick an authenticated user into visiting a malicious page to submit unauthorized...

CVE-2026-85959

The Progress MarkLogic Server is impacted by CVE-2026-85959 , where versions 12.x before 12.1.0 and 11.x before 11.3.7 fail to consistently record successful authentication events in audit logs. This insufficient logging (CWE-778) can hinder the ability to detect or investigate unauthorized acces...

EUVD-2026-97673

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently record successful authentication events in audit logs, which could limit customers' ability to detect and investigate unauthorized access or credential misuse...

CVE-2026-85958

Progress MarkLogic Server versions 12.x before 12.1.0 and 11.x before 11.3.7 are affected by an improper OAuth token validation weakness (CWE-287). This authentication flaw could allow an attacker to submit a token that the server should not accept, potentially leading to unauthorized access . No...

EUVD-2026-97680

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authentication validation weakness that could allow an attacker to use a token that should not be accepted by the affected server, which could result in unauthorized access...

CVE-2026-85957

Progress MarkLogic Server versions 11.x prior to 11.3.7 are vulnerable to an improper XML external entity restriction within the SAML processing component. The underlying cause is a SAML parser configuration that permits the processing of external DTDs or entities . This vulnerability could lead ...

EUVD-2026-97679

Affected Progress MarkLogic Server 11.x releases before 11.3.7 use a SAML parser configuration that can process external DTDs or entities, which could result in unintended network access or information disclosure...

CVE-2026-85956

Progress MarkLogic Server versions 12.x before 12.1.0 and 11.x before 11.3.7 are vulnerable to improper privilege management during backup and restore operations. A remote attacker with delegated database-administrator privileges can perform these operations on forests outside the authorized data...

EUVD-2026-97519

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with delegated database-administrator privileges to perform backup or restore operations on forests outside the authorized database scope, which could result in unauthorized access to or...

CVE-2026-85956 Improper privilege management in Progress MarkLogic Server backup and restore operations

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with delegated database-administrator privileges to perform backup or restore operations on forests outside the authorized database scope, which could result in unauthorized access to or...

EUVD-2026-97517

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with query-execution access to invoke an XQuery evaluation function without the additional required evaluation privilege, which could result in server-side code execution with elevated...

CVE-2026-85955 Improper privilege management in Progress MarkLogic Server xdmp:eval-in

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with query-execution access to invoke an XQuery evaluation function without the additional required evaluation privilege, which could result in server-side code execution with elevated...

CVE-2026-85955

Progress MarkLogic Server versions 12.x before 12.1.0 and 11.x before 11.3.7 are vulnerable to improper privilege management in the xdmp:eval-in function. A remote attacker with query-execution access can invoke an XQuery evaluation function without the necessary evaluation privilege, potentially...

EUVD-2026-97516

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 can evaluate user-controlled values supplied to certain higher-order XQuery functions in an elevated security context, which could result in privilege escalation beyond the attacker's granted permissions...

CVE-2026-85954

Progress MarkLogic Server is affected by a privilege escalation vulnerability in certain higher-order XQuery functions . In versions 12.x before 12.1.0 and 11.x before 11.3.7 , the system can evaluate user-controlled values within an elevated security context. This flaw allows an attacker to gain...

CVE-2026-85954 Improper privilege management in Progress MarkLogic Server higher-order XQuery functions

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 can evaluate user-controlled values supplied to certain higher-order XQuery functions in an elevated security context, which could result in privilege escalation beyond the attacker's granted permissions...

EUVD-2026-97515

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain privileged legacy InfoStudio modules that do not sufficiently validate user-controlled file paths and user-context values. Exploitation could result in unauthorized access to server files or execution...