CVE-2023-26100

In Progress Flowmon before 12.2.0, an application endpoint failed to sanitize user-supplied input. A threat actor could leverage a reflected XSS vulnerability to execute arbitrary code within the context of a Flowmon user's web browser...

CVE-2023-26101

In Progress Flowmon Packet Investigator before 12.1.0, a Flowmon user with access to Flowmon Packet Investigator could leverage a path-traversal vulnerability to retrieve files on the Flowmon appliance's local filesystem...

Path traversal

In Progress Flowmon Packet Investigator before 12.1.0, a Flowmon user with access to Flowmon Packet Investigator could leverage a path-traversal vulnerability to retrieve files on the Flowmon appliance's local filesystem...

Cross site scripting

In Progress Flowmon before 12.2.0, an application endpoint failed to sanitize user-supplied input. A threat actor could leverage a reflected XSS vulnerability to execute arbitrary code within the context of a Flowmon user's web browser...

CVE-2023-26101

In Progress Flowmon Packet Investigator before 12.1.0, a Flowmon user with access to Flowmon Packet Investigator could leverage a path-traversal vulnerability to retrieve files on the Flowmon appliance's local filesystem...

Progress Flowmon 跨站脚本漏洞

Progress Flowmon is a real-time network traffic monitoring tool from Progress. A security vulnerability exists in versions of Progress Flowmon prior to 12.2.0, which stems from an application endpoint's inability to clean up user-supplied input, and which can be exploited by an attacker to execut...

PT-2023-20487 · Flowmon · Flowmon

Name of the Vulnerable Software and Affected Versions: Flowmon versions prior to 12.2.0 Description: The issue arises from an application endpoint that failed to sanitize user-supplied input, allowing a threat actor to leverage a reflected XSS vulnerability. This vulnerability enables the executi...

CVE-2023-26100

In Progress Flowmon before 12.2.0, an application endpoint failed to sanitize user-supplied input. A threat actor could leverage a reflected XSS vulnerability to execute arbitrary code within the context of a Flowmon user's web browser...

CVE-2023-26100

In Progress Flowmon before 12.2.0, an application endpoint failed to sanitize user-supplied input. A threat actor could leverage a reflected XSS vulnerability to execute arbitrary code within the context of a Flowmon user's web browser...

Progress Flowmon 路径遍历漏洞

Progress Flowmon is a real-time network traffic monitoring tool from Progress. A security vulnerability exists in Progress Flowmon versions prior to 12.2.0, which stems from a path traversal vulnerability that can be exploited by an attacker to retrieve files on the device's local file system...

CVE-2023-26100: Improper Neutralization of Input During Web Page Generation

In Progress Flowmon before 12.2.0, an application endpoint failed to sanitize user-supplied input. A threat actor could leverage a reflected XSS vulnerability to execute arbitrary code within the context of a Flowmon user's web browser...

CVE-2023-26101: Improper Limitation of a Pathname to a Restricted Directory

In Progress Flowmon Packet Investigator before 12.1.0, a Flowmon user with access to Flowmon Packet Investigator could leverage a path-traversal vulnerability to retrieve files on the Flowmon appliance's local filesystem...

PT-2023-20488 · Flowmon · Flowmon Packet Investigator

Name of the Vulnerable Software and Affected Versions: Flowmon Packet Investigator versions prior to 12.1.0 Description: A path-traversal issue allows a Flowmon user with access to Flowmon Packet Investigator to retrieve files on the Flowmon appliance's local filesystem. Recommendations: For...

CVE-2023-26100

CVE-2023-26100 affects Progress Flowmon prior to 12.2.0 where an application endpoint failed to sanitize user-supplied input, enabling a reflected XSS that could execute arbitrary code in a Flowmon user’s browser. No exploitation details are provided in the documents. The referenced PT security n...

CVE-2023-26101

CVE-2023-26101 concerns a path-traversal flaw in Flowmon Packet Investigator prior to 12.1.0. A user with access to Flowmon Packet Investigator can retrieve files from the appliance’s local filesystem due to this vulnerability. Documents consistently reference Flowmon Packet Investigator versions...