Progress Flowmon — known CVE vulnerabilities

Every CVE whose affected-product data names Progress Flowmon, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2024-2389 — CVSS 10.0 (critical): In Flowmon versions prior to 11.1.14 and 12.3.5, an operating system command injection vulnerability has been identified. An…
• CVE-2026-3692 — CVSS 8.8 (high): In Progress Flowmon versions prior to 12.5.8, a vulnerability exists whereby an authenticated low-privileged user may craft a request…
• CVE-2026-8079 — CVSS 7.3 (high): In Progress Flowmon versions prior to 12.5.9 and 13.0.11, a vulnerability exists whereby an authenticated low-privileged user may craft a…
• CVE-2026-2737 — CVSS 6.1 (medium): A vulnerability exists in Progress Flowmon versions prior to 12.5.8 and 13.0.6, whereby an administrator who clicks a malicious link…