Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A cross-site scripting vulnerability in the Query Console of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker who lures an authenticated administrator to a crafted URL to execute arbitrary JavaScript in the administrator's browser session, capture credentials, and perform privileged actions on the administrator's behalf.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-9195 Cross-Site Scripting in Progress MarkLogic Server Query Console Before 11.3.6 and 12.0.3 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-9195
Post summary
The text announces CVE‑2026‑9195, a Cross‑Site Scripting vulnerability in the Progress MarkLogic Server Query Console affecting versions prior to 11.3.6 and 12.0.3, without providing proof of exploit, patches, or active usage evidence.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | progress | marklogic_server | - | - | - |