CVE-2026-2514 : faille moyenne progress flowmon anomaly detection… (CVSS 6.1)

In Progress Flowmon ADS versions prior to 12.5.5 and 13.0.3, a vulnerability exists whereby an adversary with access to Flowmon monitoring ports may craft malicious network data that, when processed by Flowmon ADS and viewed by an authenticated user, could result in unintended actions being executed in the user's browser context.

Sévérité

Moyenne (CVSS 6.1)

Vecteur CVSS

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitation active

Non signalée par la CISA

Publication

12 mars 2026

Dernière mise à jour

3 sept. 2026

• progress flowmon anomaly detection system

• Fiche CVE-2026-2514 sur le NVD (NIST)
• community.progress.com/s/article/CVE-2026-2514-Progress-Flowmon-ADS