PT-2026-2444 · Progress · Flowmon Ads
CVE-2025-13774
·
Publicado
2026-01-13
·
Atualizado
2026-01-13
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Progress Flowmon ADS versions prior to 12.5.4 and 13.0.1
Description
An SQL injection issue exists in Progress Flowmon ADS that allows authenticated users to execute unintended SQL queries and commands. The issue allows for the execution of arbitrary SQL commands through injection.
Recommendations
Update Progress Flowmon ADS to version 12.5.4 or later.
Update Progress Flowmon ADS to version 13.0.1 or later.
Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Flowmon Ads