high7.1
CVE-2026-85970
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 enable XML external entity processing by default in multiple server paths…
Impact
Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 enable XML external entity processing by default in multiple server paths, which could allow crafted XML to cause server-side requests or disclosure of local files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Progress | Progress MarkLogic Server 12.X Releases | before 12.1.0 |
| 11.X Releases | before 11.3.7 |
Versions were read from the advisory text. No structured product data has been published for this record yet.