Script Command Execution Vulnerability in Flowmon by Progress
CVE-2025-10239

7.2HIGH

Key Information:

Vendor

Progress Software
Status
Flowmon
Vendor
CVE Published:
9 October 2025

What is CVE-2025-10239?

A vulnerability has been discovered in Flowmon versions before 12.5.5, where administrators can inadvertently execute unintended commands through scripts meant for troubleshooting. This flaw arises when users with appropriate privileges access the management interface, potentially leading to unauthorized actions within the system.

Affected Version(s)

Flowmon Versions prior to 12.5.5

References

https://community.progress.com/s/article/CVE-2025-10239
vendor-advisory

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

This vulnerability was discovered by Kentaro Kawane.
JSON
.
CVE-2025-10239 : Script Command Execution Vulnerability in Flowmon by Progress