Yüksek CVSS 8.5
CVE-2026-9203: Marklogic Server: sunucu taraflı istek sahteciliği (SSRF)
Açıklama (NVD)
A server-side request forgery vulnerability in Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with low-privileged roles to bypass protections for cloud instance metadata endpoints. Successful exploitation can disclose cloud credentials and compromise cloud resources accessible to the host instance.
Özet bilgiler
- Ürün
- Progress Marklogic Server
- CVSS v3.1
- 8.5
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H - EPSS
- %0,34 (yüzdelik 28)
- CWE
- CWE-918
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| progress-marklogic-server | — | — | 11.3.6 |
| progress-marklogic-server | 12.0.0 | — | 12.0.3 |