Skip to content
OpenAdvisories
High · 8.6 CVE-2026-2513 EUVD-2026-11569GHSA-qw62-h6wx-wcrr

Possibility of unintended actions when an administrator clicks a malicious link in the Progress Flowmon ADS web application

Published Mar 12, 2026 · Updated Mar 13, 2026 · Assigned by ProgressSoftware

Description

A vulnerability exists in Progress Flowmon ADS versions prior to 12.5.5 and 13.0.3, whereby an administrator who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated web session.

Affected products

VendorProductAffectedFixed
Progress Software Flowmon ADS Flowmon ADS 12 versions prior to 12.5.5, Flowmon ADS 13 versions prior to 13.0.3 —

References