[CVE-2026-85969] Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an out…

Descripción técnica

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an out-of-bounds write vulnerability in certain language-processing functionality. A remote authenticated attacker could exploit this vulnerability to cause server instability or limited modification of data.

Puntuación CVSS

Score: 7.1/10 — Severidad: HIGH — Estado NIST: Received

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Debilidades (CWE)

CWE-787

Fuente oficial

Publicado en NIST NVD.