CVE-2026-2514

8.6 highEPSS 0.2%

High (8.6) in progress flowmon anomaly detection system. EPSS 0.2% chance of exploitation in the next 30 days.

In Progress Flowmon ADS versions prior to 12.5.5 and 13.0.3, a vulnerability exists whereby an adversary with access to Flowmon monitoring ports may craft malicious network data that, when processed by Flowmon ADS and viewed by an authenticated user, could result in unintended actions being executed in the user's browser context.

Severity

CVSS 4.0

8.6 high

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 7% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2026-03-12
Modified: 2026-09-03
Record from: the NVD, synced 2026-10-19

Affected

progress:flowmon_anomaly_detection_system

References

https://community.progress.com/s/article/CVE-2026-2514-Progress-Flowmon-ADS

Check your stack JSON