This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2026-2514 | BDVDB-2026-320136 Detail

Progress SoftwareFlowmon ADS

Description#

In Progress Flowmon ADS versions prior to 12.5.5 and 13.0.3, a vulnerability exists whereby an adversary with access to Flowmon monitoring ports may craft malicious network data that, when processed by Flowmon ADS and viewed by an authenticated user, could result in unintended actions being executed in the user's browser context.

Impact#

CAPEC-63 Cross-Site Scripting (XSS)

Weaknesses#

  • CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.