Skip to content
OpenAdvisories
High · 8.8 CVE-2025-13774 EUVD-2026-2350GHSA-p72m-xmp5-fw46

SQL injection leading to privilege escalation in Progress Flowmon ADS

Published Jan 13, 2026 · Updated Feb 26, 2026 · Assigned by ProgressSoftware

Vendor: Progress Software Product: Flowmon ADS

Description

A vulnerability exists in Progress Flowmon ADS versions prior to 12.5.4 and 13.0.1 where an SQL injection vulnerability allows authenticated users to execute unintended SQL queries and commands.

Affected products

VendorProductAffectedFixed
Progress Software Flowmon ADS Flowmon ADS 12 versions prior to 12.5.4, Flowmon ADS 13 versions prior to 13.0.1 —

References