VYPR

Marklogic Server

by Progress (organisation)

CVEs (41)

  • CVE-2026-85976MedOct 12, 2026
    risk 0.35cvss 5.4epss 0.00

    Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently sanitize input used by the Query Console file-exploration endpoint, which could allow HTTP response splitting and unintended client-side response handling.

Page 3 of 3