Kritik CVSS 9.3
CVE-2026-9195: Marklogic Server: dizin geçişi
Açıklama (NVD)
A cross-site scripting vulnerability in the Query Console of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker who lures an authenticated administrator to a crafted URL to execute arbitrary JavaScript in the administrator's browser session, capture credentials, and perform privileged actions on the administrator's behalf.
Özet bilgiler
- Ürün
- Progress Marklogic Server
- CVSS v3.1
- 9.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N - EPSS
- %0,65 (yüzdelik 52)
- CWE
- CWE-22
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| progress-marklogic-server | — | — | 11.3.6 |
| progress-marklogic-server | 12.0.0 | — | 12.0.3 |