Progress Software

Everything Vuln Post has reported about Progress Software: 2 stories, newest first. Part of our Vulnerabilities coverage.

12 Oct
Vulnerabilities

MarkLogic Server Critical Isolation Flaw in Pre-11.3.7/12.1.0 Enables Session Hijacking via REST and XDBC

A critical isolation flaw in MarkLogic Server allows attackers to hijack sessions via REST and XDBC paths in versions prior to 11.3.7 and 12.1.0.

12 Oct
Vulnerabilities

A critical vulnerability in older MarkLogic Server versions lets users with limited rights escalate to full administrative control.