CVE-2026-2737 in Flowmon
摘要 (英语)
A vulnerability exists in Progress Flowmon versions prior to 12.5.8 and 13.0.6, whereby an administrator who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated web session.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
负责
ProgressSoftware
预定
2026-02-19
披露
2026-04-02
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 354872 | Progress Flowmon Link 跨网站脚本 | 79 | 未定义 | 官方修复 | CVE-2026-2737 |