Progress Software Flowmon vulnerabilities
7 vulnerabilities
Known vulnerabilities in Progress Software Flowmon, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-11906progress softwareflowmon
EPSS score0.14%
A vulnerability exists in Progress Flowmon versions prior 12.5.6 where certain system configuration files have incorrect file permissions, allowing a user with access to the default flowmon system user account used for SSH access to potentially escalate privileges to root during service initialization.CVE-2025-10239progress softwareflowmonEPSS score0.38%
In Flowmon versions prior to 12.5.5, a vulnerability has been identified that allows a user with administrator privileges and access to the management interface to execute additional unintended commands within scripts intended for troubleshooting purposes.CVE-2025-10240progress softwareflowmonEPSS score0.32%
A vulnerability exists in the Progress Flowmon web application prior to version 12.5.5, whereby a user who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated session.CVE-2024-2389progress softwareflowmon+1EPSS score93.04%
In Flowmon versions prior to 11.1.14 and 12.3.5, an operating system command injection vulnerability has been identified. An unauthenticated user can gain entry to the system via the Flowmon management interface, allowing for the execution of arbitrary system commands.CVE-2026-2737progress softwareflowmon+1EPSS score0.25%
A vulnerability exists in Progress Flowmon versions prior to 12.5.8 and 13.0.6, whereby an administrator who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated web session.CVE-2026-8079progress softwareflowmon+1EPSS score0.32%
In Progress Flowmon versions prior to 12.5.9 and 13.0.11, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the PDF generation process that results in operations being performed with the privileges of another user, potentially leading to unauthorized access to sensitive data and unintended modifications to system configuration.CVE-2026-3692progress softwareflowmon+1EPSS score0.57%
In Progress Flowmon versions prior to 12.5.8, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the report generation process that results in unintended commands being executed on the server.