PatchTheCVEmarklogic vulnerabilities
Recent CVEs affecting marklogic products. 5 tracked.
marklogic has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-09-07. Highest priority: CVE-2016-8383 (score 56/100).
- CVE-2017-2795 HIGH 8.3 DOWNGRADE An exploitable heap corruption vulnerability exists in the Txo functionality of Antenna House DMC HTMLFilter a
- CVE-2017-2792 HIGH 8.3 DOWNGRADE An exploitable heap corruption vulnerability exists in the iBldDirInfo functionality of Antenna House DMC HTML
- CVE-2016-8384 HIGH 8.8 DOWNGRADE An exploitable heap corruption vulnerability exists in the DHFSummary functionality of AntennaHouse DMC HTMLFi
- CVE-2016-8383 HIGH 8.8 DOWNGRADE An exploitable heap corruption vulnerability exists in the Doc_GetFontTable functionality of AntennaHouse DMC
- CVE-2016-8382 HIGH 8.3 DOWNGRADE An exploitable heap corruption vulnerability exists in the Doc_SetSummary functionality of AntennaHouse DMC HT
FAQ
How do I fix marklogic vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is marklogic being exploited right now?
None of the tracked marklogic CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which marklogic CVE should I patch first?
CVE-2016-8383 currently ranks highest (56/100): An exploitable heap corruption vulnerability exists in the Doc_GetFontTable functionality of AntennaHouse DMC .