Progress Software Flowmon ADS vulnerabilities

4 vulnerabilities

Known vulnerabilities in Progress Software Flowmon ADS, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2025-13774progress softwareflowmon ads+1
EPSS score
0.46%
A vulnerability exists in Progress Flowmon ADS versions prior to 12.5.4 and 13.0.1 where an SQL injection vulnerability allows authenticated users to execute unintended SQL queries and commands.8.6CVE-2026-2513progress softwareflowmon ads+1
EPSS score
0.17%
A vulnerability exists in Progress Flowmon ADS versions prior to 12.5.5 and 13.0.3, whereby an administrator who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated web session.8.6CVE-2026-2514progress softwareflowmon ads+1
EPSS score
0.19%
In Progress Flowmon ADS versions prior to 12.5.5 and 13.0.3, a vulnerability exists whereby an adversary with access to Flowmon monitoring ports may craft malicious network data that, when processed by Flowmon ADS and viewed by an authenticated user, could result in unintended actions being executed in the user's browser context.8.7CVE-2026-9272progress softwareflowmon ads+1
EPSS score
0.43%
In Progress Flowmon ADS versions prior to 12.5.6 and 13.0.5, a vulnerability exists whereby an adversary who is authenticated as a low-privileged user in the Anomaly Detection System (ADS) may send specially crafted requests that could result in unauthorized access to application data and its modification.