P
Vendor security profile10 actively exploited CVEs
progress
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs80
Critical16
CISA KEV10
Public exploit13
Patch rate%1
Avg. CVSS7.8
12-month vulnerability rate
0
0
1
0
2
2
4
6
33
18
0
3
CVE KEV
CVE severity distribution
80toplam CVE
Critical16 (20%)
High40 (50%)
Medium17 (21%)
Uncertain7 (9%)
Patch and exploitation view
%1
Verified patch
%13
CISA KEV
%16
Public exploit
1Patch available
0Partial
8Workaround
0Vendor: no patch
71Unknown
Latest vulnerabilities
5.4
CVE-2026-85976
HTTP response splitting in Progress MarkLogic Server Query Console
PS
Patch status unknownEPSS %0
7.5
CVE-2026-85975
Cleartext transmission in Progress MarkLogic Server Amazon S3 connections
PS
Patch status unknownEPSS %0
7.4
CVE-2026-85974
Improper TLS hostname verification in Progress MarkLogic Server
PS
Patch status unknownEPSS %0
7.4
CVE-2026-85973
Cleartext transmission in Progress MarkLogic Server cluster join operations
PS
Patch status unknownEPSS %0
7.4
CVE-2026-85972
Improper Kerberos server verification in Progress MarkLogic Server
PS
Patch status unknownEPSS %0
7.1
CVE-2026-85971
Incorrect log file permissions in Progress MarkLogic Server
PS
Patch status unknownEPSS %0
7.1
CVE-2026-85970
Improper XML external entity restriction in Progress MarkLogic Server
PS
Patch status unknownEPSS %0
7.1
CVE-2026-85969
Out-of-bounds write in Progress MarkLogic Server
PS
Patch status unknownEPSS %0
7.1
CVE-2026-85968
Out-of-bounds read in Progress MarkLogic Server
PS
Patch status unknownEPSS %0
6.1
CVE-2026-85967
Cross-site scripting in Progress MarkLogic Server
PS
Patch status unknownEPSS %0