Progress Flowmon vulnerabilities

4 CVEs affecting Progress Flowmon, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-8079, published 2026-07-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-2389, published 2024-04-02. Critical severity, CVSS 9.8. EPSS: 93% chance of exploitation in the next 30 days. In Flowmon versions prior to 11.1.14 and 12.3.5, an operating system command injection vulnerability has been identified. An unauthenticated user can gain entry to the system via the Flowmon…
CVE-2026-3692, published 2026-04-02. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. In Progress Flowmon versions prior to 12.5.8, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the report generation process that results in unintended…
CVE-2026-8079, published 2026-07-02. High severity, CVSS 7.3. EPSS: 0.3% chance of exploitation in the next 30 days. In Progress Flowmon versions prior to 12.5.9 and 13.0.11, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the PDF generation process that results in…
CVE-2026-2737, published 2026-04-02. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability exists in Progress Flowmon versions prior to 12.5.8 and 13.0.6, whereby an administrator who clicks a malicious link provided by an attacker may inadvertently trigger unintended…