Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2026-2514

Possibility of unintended actions when viewing maliciously crafted network data in Progress Flowmon ADS web application

In Progress Flowmon ADS versions prior to 12.5.5 and 13.0.3, a vulnerability exists whereby an adversary with access to Flowmon monitoring ports may craft malicious network data that, when processed by Flowmon ADS and viewed by an authenticated user, could result in unintended actions being executed in the user's browser context.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Progress Progress Software
Products
Flowmon Anomaly Detection System Flowmon Ads
CVE-2026-2513

Possibility of unintended actions when an administrator clicks a malicious link in the Progress Flowmon ADS web application

A vulnerability exists in Progress Flowmon ADS versions prior to 12.5.5 and 13.0.3, whereby an administrator who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated web session.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Progress Progress Software
Products
Flowmon Anomaly Detection System Flowmon Ads
CVE-2026-9272

Possibility of unintended database operations when querying data related to detected anomalies in Progress Flowmon ADS

In Progress Flowmon ADS versions prior to 12.5.6 and 13.0.5, a vulnerability exists whereby an adversary who is authenticated as a low-privileged user in the Anomaly Detection System (ADS) may send specially crafted requests that could result in unauthorized access to application data and its modification.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Progress Progress Software
Products
Flowmon Anomaly Detection System Flowmon Ads
CVE-2026-8079

Unintended limited set of actions with elevated privileges may be performed during PDF generation in Progress Flowmon

In Progress Flowmon versions prior to 12.5.9 and 13.0.11, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the PDF generation process that results in operations being performed with the privileges of another user, potentially leading to unauthorized access to sensitive data and unintended modifications to system configuration.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Progress Progress Software
Products
Flowmon Flowmon
CVE-2026-2737

Possibility of unintended actions when an administrator clicks a malicious link in the Progress Flowmon web application

A vulnerability exists in Progress Flowmon versions prior to 12.5.8 and 13.0.6, whereby an administrator who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated web session.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Progress Progress Software
Products
Flowmon Flowmon
CVE-2026-3692

Unintended command execution during report generation in Progress Flowmon

In Progress Flowmon versions prior to 12.5.8, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the report generation process that results in unintended commands being executed on the server.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Progress Progress Software
Products
Flowmon Flowmon