Vulnerabilidades do Progress Software Flowmon

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Progress Software Flowmon: 5 registro(s), com versões afetadas e correções.

CVE-2026-3692 Alta · 8.8 CWE-78 02/04/2026

Unintended command execution during report generation in Progress Flowmon

In Progress Flowmon versions prior to 12.5.8, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the report generation process that results in unintended commands being executed on the server.

CVE-2026-2737 Média · 6.1 CWE-79 02/04/2026

Possibility of unintended actions when an administrator clicks a malicious link in the Progress Flowmon web application

A vulnerability exists in Progress Flowmon versions prior to 12.5.8 and 13.0.6, whereby an administrator who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated web session.

CVE-2025-11906 Média · 6.7 CWE-732 30/10/2025

Privilege escalation via writable configuration files in Progress Flowmon

A vulnerability exists in Progress Flowmon versions prior 12.5.6 where certain system configuration files have incorrect file permissions, allowing a user with access to the default flowmon system user account used for SSH access to potentially escalate privileges to root during service initialization.

CVE-2025-10240 Alta · 8.8 CWE-79 09/10/2025

Possibility of unintended actions when a user clicks a malicious link in the Progress Flowmon web application

A vulnerability exists in the Progress Flowmon web application prior to version 12.5.5, whereby a user who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated session.

CVE-2025-10239 Alta · 7.2 CWE-78 09/10/2025

Unintended command execution via troubleshooting scripts in Progress Flowmon

In Flowmon versions prior to 12.5.5, a vulnerability has been identified that allows a user with administrator privileges and access to the management interface to execute additional unintended commands within scripts intended for troubleshooting purposes.