Skip to content
OpenAdvisories
High · 8.5 CVE-2026-2737 EUVD-2026-18222GHSA-g7f7-cc3w-5g3g

Possibility of unintended actions when an administrator clicks a malicious link in the Progress Flowmon web application

Published Apr 2, 2026 · Updated Apr 3, 2026 · Assigned by ProgressSoftware

Description

A vulnerability exists in Progress Flowmon versions prior to 12.5.8 and 13.0.6, whereby an administrator who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated web session.

Affected products

VendorProductAffectedFixed
Progress Software Flowmon Flowmon 12 versions prior to 12.5.8, Flowmon 13 versions prior to 13.0.6 —

References