Advisories · Technology

Progress Software Flowmon.

Every CVE that names Progress Software Flowmon among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-8079 CVE record

CVSS 8.7 High

Unintended limited set of actions with elevated privileges may be performed during PDF generation in Progress Flowmon
- Progress Software Flowmon
- Broken access control
Not analysed yet 2 Jul 2026
CVE-2026-2737 CVE record

CVSS 8.5 High

Possibility of unintended actions when an administrator clicks a malicious link in the Progress Flowmon web application
- Progress Software Flowmon
- Cross-site scripting (XSS)
Not analysed yet 2 Apr 2026
CVE-2026-3692 CVE record

CVSS 8.7 High

Unintended command execution during report generation in Progress Flowmon
- Progress Software Flowmon
- Command injection
Not analysed yet 2 Apr 2026
CVE-2025-11906 CVE record

CVSS 6.7 Medium

Privilege escalation via writable configuration files in Progress Flowmon
- Progress Software Flowmon
- Broken access control
Not analysed yet 30 Oct 2025
CVE-2025-10240 CVE record

CVSS 8.8 High

Possibility of unintended actions when a user clicks a malicious link in the Progress Flowmon web application
- Progress Software Flowmon
- Cross-site scripting (XSS)
Not analysed yet 9 Oct 2025
CVE-2025-10239 CVE record

CVSS 7.2 High

Unintended command execution via troubleshooting scripts in Progress Flowmon
- Progress Software Flowmon
- Command injection
Not analysed yet 9 Oct 2025
CVE-2024-2389 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Flowmon Unauthenticated Command Injection Vulnerability
- Progress Software Flowmon
- Command injection
Not analysed yet 2 Apr 2024