PS
Vendor security profile1 actively exploited CVEs
Progress Software
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs17
Critical3
CISA KEV1
Public exploit2
Patch rate%12
Avg. CVSS7.4
12-month vulnerability rate
0
0
0
0
0
0
0
1
0
0
5
11
CVE KEV
CVE severity distribution
17toplam CVE
Critical3 (18%)
High8 (47%)
Medium5 (29%)
Low1 (6%)
Patch and exploitation view
%12
Verified patch
%6
CISA KEV
%12
Public exploit
2Patch available
0Partial
0Workaround
0Vendor: no patch
15Unknown
Latest vulnerabilities
5.4
CVE-2026-85976
HTTP response splitting in Progress MarkLogic Server Query Console
PS
Patch status unknownEPSS %0
7.5
CVE-2026-85975
Cleartext transmission in Progress MarkLogic Server Amazon S3 connections
PS
Patch status unknownEPSS %0
7.4
CVE-2026-85974
Improper TLS hostname verification in Progress MarkLogic Server
PS
Patch status unknownEPSS %0
7.4
CVE-2026-85973
Cleartext transmission in Progress MarkLogic Server cluster join operations
PS
Patch status unknownEPSS %0
7.4
CVE-2026-85972
Improper Kerberos server verification in Progress MarkLogic Server
PS
Patch status unknownEPSS %0
7.1
CVE-2026-85971
Incorrect log file permissions in Progress MarkLogic Server
PS
Patch status unknownEPSS %0
7.1
CVE-2026-85970
Improper XML external entity restriction in Progress MarkLogic Server
PS
Patch status unknownEPSS %0
7.1
CVE-2026-85969
Out-of-bounds write in Progress MarkLogic Server
PS
Patch status unknownEPSS %0
7.1
CVE-2026-85968
Out-of-bounds read in Progress MarkLogic Server
PS
Patch status unknownEPSS %0
6.1
CVE-2026-85967
Cross-site scripting in Progress MarkLogic Server
PS
Patch status unknownEPSS %0