Web Session Vulnerability in Progress Flowmon ADS by Progress
CVE-2026-2513

8.6HIGH

Key Information:

Vendor

Progress Software
Status
Flowmon Ads
Vendor
CVE Published:
12 March 2026

What is CVE-2026-2513?

A vulnerability exists in certain versions of Progress Flowmon ADS, where an authenticated administrator, when clicking a malicious link, may trigger unintended actions in their web session. This can lead to unauthorized access or manipulation of the system’s functionalities, posing significant security risks. It is crucial for organizations using affected versions to assess their exposure and implement necessary security measures.

Affected Version(s)

Flowmon ADS Flowmon ADS 12 versions prior to 12.5.5

Flowmon ADS Flowmon ADS 12 versions prior to 12.5.5

Flowmon ADS Flowmon ADS 13 versions prior to 13.0.3

References

https://community.progress.com/s/article/CVE-2026-2513-Pr...
vendor-advisory

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.