CVE-2025-10239: falha de alta gravidade em Progress Software Flowmon
Unintended command execution via troubleshooting scripts in Progress Flowmon
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.2epss 0.4%
In Flowmon versions prior to 12.5.5, a vulnerability has been identified that allows a user with administrator privileges and access to the management interface to execute additional unintended commands within scripts intended for troubleshooting purposes.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Progress Software · FlowmonCVEs relacionadas — Progress Software Flowmon
No mesmo produto, das mais perigosas para as menos.
CVE-2024-2389CRITICALFlowmon Unauthenticated Command Injection VulnerabilityEPSS 93.0%CVE-2026-3692HIGHUnintended command execution during report generation in Progress FlowmonEPSS 0.4%CVE-2026-8079HIGHUnintended limited set of actions with elevated privileges may be performed during PDF generation in Progress FlowmonEPSS 0.3%CVE-2025-10240HIGHPossibility of unintended actions when a user clicks a malicious link in the Progress Flowmon web applicationEPSS 0.3%CVE-2026-2737HIGHPossibility of unintended actions when an administrator clicks a malicious link in the Progress Flowmon web applicationEPSS 0.2%CVE-2025-11906MEDIUMPrivilege escalation via writable configuration files in Progress FlowmonEPSS 0.1%