CVE-2026-2513 — Possibility of unintended actions when an administrator clicks a malicious link in the Progress Flowmon ADS web application
A vulnerability exists in Progress Flowmon ADS versions prior to 12.5.5 and 13.0.3, whereby an administrator who clicks a malicious link provided by an attacker may inadvertentl…
Published: 2026-03-12 · CVSS: 8.6 · CVSS 4.0
A vulnerability exists in Progress Flowmon ADS versions prior to 12.5.5 and 13.0.3, whereby an administrator who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated web session.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7