CVE-2025-10240: Progress Software Flowmon

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability exists in the Progress Flowmon web application prior to version 12.5.5, whereby a user who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated session.

Affected products

• Progress Software Flowmon: before 12.5.5 (fixed in 12.5.5)

Published 2025-10-09. Last modified 2026-10-08.