CVE-2025-13447high

CVE-2025-13447: fallo de gravedad alta en Progress Software LoadMaster

OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear LoadMaster

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

26Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.4epss 27%
OS Command Injection Remote Code Execution Vulnerability in API in Progress LoadMaster allows an authenticated attacker with “User Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the API input parameters
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Productos afectados
Progress Software · LoadMaster
CVEs relacionadas — Progress Software LoadMaster

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-8037CRITICALOS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAFEPSS 99.8%KEVCVE-2024-1212CRITICALLoadMaster Pre-Authenticated OS Command InjectionEPSS 95.4%KEVCVE-2024-2448HIGHLoadMaster Command Injection VulnerabilityEPSS 55.4%CVE-2025-13444HIGHOS Command Injection Remote Code Execution Vulnerability in Progress LoadMasterEPSS 27.2%CVE-2026-3518HIGHOS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAFEPSS 16.9%CVE-2026-3517HIGHOS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAFEPSS 15.5%