Flowmon vulnerabilities
5 known vulnerabilities in Flowmon from Progress Software. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.3 High severity
Flowmon: Incorrect Authorization
In Progress Flowmon versions prior to 12.5.9 and 13.0.11, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the PDF generation process that results in operations being performed with the privileges of another user,
- 8.8 High severity
Flowmon: Improper Neutralization of Special Elements used in an OS Command
In Progress Flowmon versions prior to 12.5.8, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the report generation process that results in unintended commands being executed on the server.
- 8.8 High severity
Flowmon: Improper Neutralization of Input During Web Page Generation
A vulnerability exists in the Progress Flowmon web application prior to version 12.5.5, whereby a user who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated session.
- 7.2 High severity
Flowmon: Improper Neutralization of Special Elements used in an OS Command
In Flowmon versions prior to 12.5.5, a vulnerability has been identified that allows a user with administrator privileges and access to the management interface to execute additional unintended commands within scripts intended for troubleshooting purposes.
- 9.8 Critical severity
Flowmon: Improper Neutralization of Special Elements used in an OS Command
In Flowmon versions prior to 11.1.14 and 12.3.5, an operating system command injection vulnerability has been identified. An unauthenticated user can gain entry to the system via the Flowmon management interface, allowing for the execution of arbitrary system