4 matches found
CVE-2024-2389
CVE-2024-2389 affects Progress Flowmon / Flowmon products. In Flowmon versions prior to 11.1.14 and 12.3.5, there is an unauthenticated command-injection vulnerability reachable via the Flowmon management interface, permitting execution of arbitrary system commands on the target. Impact documents...
CVE-2026-2737
CVE-2026-2737 affects Progress Flowmon before versions 12.5.8 and 13.0.6. An administrator who clicks a malicious link within an authenticated Flowmon web session may trigger unintended actions. The available sources describe the affected product versions and the login-session impact but do not s...
CVE-2026-8079
Progress Flowmon is affected in versions prior to 12.5.9 and 13.0.11, where an authenticated low-privileged user can craft a PDF-generation request that causes operations to run with another user’s privileges, potentially exposing sensitive data and enabling unintended configuration changes. The ...