Skip to content
OpenAdvisories
High · 8.8 CVE-2025-10240 EUVD-2025-33341GHSA-46v2-jj3m-h888

Possibility of unintended actions when a user clicks a malicious link in the Progress Flowmon web application

Published Oct 9, 2025 · Updated Feb 26, 2026 · Assigned by ProgressSoftware

Description

A vulnerability exists in the Progress Flowmon web application prior to version 12.5.5, whereby a user who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated session.

Affected products

VendorProductAffectedFixed
Progress Software Flowmon Versions prior to 12.5.5 —

References