CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-9195

A cross-site scripting vulnerability in the Query Console of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker who lures an authenticated administrator to a crafted URL to execute arbitrary JavaScript in the administrator's browser session, capture credentials, and perform privileged actions on the administrator's behalf.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 34.4%

CVSS Severity

CVSS v3 Score 9.3

References

https://community.progress.com/s/article/Marklogic-Critical-Security-Alert-Bulletin-August-2026

Products affected by CVE-2026-9195

Progress » Marklogic Server » Version: 10.0-1

cpe:2.3:a:progress:marklogic_server:10.0-1
Progress » Marklogic Server » Version: 10.0-10

cpe:2.3:a:progress:marklogic_server:10.0-10
Progress » Marklogic Server » Version: 10.0-10.1

cpe:2.3:a:progress:marklogic_server:10.0-10.1
Progress » Marklogic Server » Version: 10.0-10.2

cpe:2.3:a:progress:marklogic_server:10.0-10.2
Progress » Marklogic Server » Version: 10.0-11

cpe:2.3:a:progress:marklogic_server:10.0-11
Progress » Marklogic Server » Version: 10.0-11.1

cpe:2.3:a:progress:marklogic_server:10.0-11.1
Progress » Marklogic Server » Version: 10.0-2

cpe:2.3:a:progress:marklogic_server:10.0-2
Progress » Marklogic Server » Version: 10.0-2.1

cpe:2.3:a:progress:marklogic_server:10.0-2.1
Progress » Marklogic Server » Version: 10.0-3

cpe:2.3:a:progress:marklogic_server:10.0-3
Progress » Marklogic Server » Version: 10.0-4

cpe:2.3:a:progress:marklogic_server:10.0-4
Progress » Marklogic Server » Version: 10.0-4.2

cpe:2.3:a:progress:marklogic_server:10.0-4.2
Progress » Marklogic Server » Version: 10.0-4.4

cpe:2.3:a:progress:marklogic_server:10.0-4.4
Progress » Marklogic Server » Version: 10.0-5

cpe:2.3:a:progress:marklogic_server:10.0-5
Progress » Marklogic Server » Version: 10.0-5.1

cpe:2.3:a:progress:marklogic_server:10.0-5.1
Progress » Marklogic Server » Version: 10.0-5.2

cpe:2.3:a:progress:marklogic_server:10.0-5.2
Progress » Marklogic Server » Version: 10.0-6

cpe:2.3:a:progress:marklogic_server:10.0-6
Progress » Marklogic Server » Version: 10.0-6.1

cpe:2.3:a:progress:marklogic_server:10.0-6.1
Progress » Marklogic Server » Version: 10.0-6.2

cpe:2.3:a:progress:marklogic_server:10.0-6.2
Progress » Marklogic Server » Version: 10.0-6.3

cpe:2.3:a:progress:marklogic_server:10.0-6.3
Progress » Marklogic Server » Version: 10.0-6.4

cpe:2.3:a:progress:marklogic_server:10.0-6.4
Progress » Marklogic Server » Version: 10.0-6.6

cpe:2.3:a:progress:marklogic_server:10.0-6.6
Progress » Marklogic Server » Version: 10.0-7

cpe:2.3:a:progress:marklogic_server:10.0-7
Progress » Marklogic Server » Version: 10.0-7.1

cpe:2.3:a:progress:marklogic_server:10.0-7.1
Progress » Marklogic Server » Version: 10.0-7.3

cpe:2.3:a:progress:marklogic_server:10.0-7.3
Progress » Marklogic Server » Version: 10.0-7.4

cpe:2.3:a:progress:marklogic_server:10.0-7.4
Progress » Marklogic Server » Version: 10.0-8

cpe:2.3:a:progress:marklogic_server:10.0-8
Progress » Marklogic Server » Version: 10.0-8.1

cpe:2.3:a:progress:marklogic_server:10.0-8.1
Progress » Marklogic Server » Version: 10.0-8.2

cpe:2.3:a:progress:marklogic_server:10.0-8.2
Progress » Marklogic Server » Version: 10.0-8.3

cpe:2.3:a:progress:marklogic_server:10.0-8.3
Progress » Marklogic Server » Version: 10.0-8.5

cpe:2.3:a:progress:marklogic_server:10.0-8.5
Progress » Marklogic Server » Version: 10.0-9

cpe:2.3:a:progress:marklogic_server:10.0-9
Progress » Marklogic Server » Version: 10.0-9.1

cpe:2.3:a:progress:marklogic_server:10.0-9.1
Progress » Marklogic Server » Version: 10.0-9.2

cpe:2.3:a:progress:marklogic_server:10.0-9.2
Progress » Marklogic Server » Version: 10.0-9.4

cpe:2.3:a:progress:marklogic_server:10.0-9.4
Progress » Marklogic Server » Version: 10.0-9.5

cpe:2.3:a:progress:marklogic_server:10.0-9.5
Progress » Marklogic Server » Version: 10.0-9.7

cpe:2.3:a:progress:marklogic_server:10.0-9.7
Progress » Marklogic Server » Version: 11.0.0

cpe:2.3:a:progress:marklogic_server:11.0.0
Progress » Marklogic Server » Version: 11.0.2

cpe:2.3:a:progress:marklogic_server:11.0.2
Progress » Marklogic Server » Version: 11.0.3

cpe:2.3:a:progress:marklogic_server:11.0.3
Progress » Marklogic Server » Version: 11.1.0

cpe:2.3:a:progress:marklogic_server:11.1.0
Progress » Marklogic Server » Version: 11.2.0

cpe:2.3:a:progress:marklogic_server:11.2.0
Progress » Marklogic Server » Version: 11.3.0

cpe:2.3:a:progress:marklogic_server:11.3.0
Progress » Marklogic Server » Version: 11.3.1

cpe:2.3:a:progress:marklogic_server:11.3.1
Progress » Marklogic Server » Version: 11.3.2

cpe:2.3:a:progress:marklogic_server:11.3.2
Progress » Marklogic Server » Version: 11.3.3

cpe:2.3:a:progress:marklogic_server:11.3.3
Progress » Marklogic Server » Version: 11.3.4

cpe:2.3:a:progress:marklogic_server:11.3.4
Progress » Marklogic Server » Version: 11.3.5

cpe:2.3:a:progress:marklogic_server:11.3.5
Progress » Marklogic Server » Version: 12.0.0

cpe:2.3:a:progress:marklogic_server:12.0.0
Progress » Marklogic Server » Version: 12.0.1

cpe:2.3:a:progress:marklogic_server:12.0.1
Progress » Marklogic Server » Version: 12.0.2

cpe:2.3:a:progress:marklogic_server:12.0.2
Progress » Marklogic Server » Version: 9.0-10

cpe:2.3:a:progress:marklogic_server:9.0-10
Progress » Marklogic Server » Version: 9.0-11

cpe:2.3:a:progress:marklogic_server:9.0-11
Progress » Marklogic Server » Version: 9.0-12

cpe:2.3:a:progress:marklogic_server:9.0-12
Progress » Marklogic Server » Version: 9.0-13

cpe:2.3:a:progress:marklogic_server:9.0-13
Progress » Marklogic Server » Version: 9.0-2

cpe:2.3:a:progress:marklogic_server:9.0-2
Progress » Marklogic Server » Version: 9.0-3

cpe:2.3:a:progress:marklogic_server:9.0-3
Progress » Marklogic Server » Version: 9.0-4

cpe:2.3:a:progress:marklogic_server:9.0-4
Progress » Marklogic Server » Version: 9.0-5

cpe:2.3:a:progress:marklogic_server:9.0-5
Progress » Marklogic Server » Version: 9.0-6

cpe:2.3:a:progress:marklogic_server:9.0-6
Progress » Marklogic Server » Version: 9.0-7

cpe:2.3:a:progress:marklogic_server:9.0-7
Progress » Marklogic Server » Version: 9.0-8

cpe:2.3:a:progress:marklogic_server:9.0-8
Progress » Marklogic Server » Version: 9.0-9

cpe:2.3:a:progress:marklogic_server:9.0-9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-9195

Products

Pricing

Contact Us