Progress Flowmon Anomaly Detection System vulnerabilities

4 CVEs affecting Progress Flowmon Anomaly Detection System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-9272, published 2026-07-02.

More from Progress.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-13774, published 2026-01-13. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability exists in Progress Flowmon ADS versions prior to 12.5.4 and 13.0.1 where an SQL injection vulnerability allows authenticated users to execute unintended SQL queries and commands.
• CVE-2026-9272, published 2026-07-02. High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days. In Progress Flowmon ADS versions prior to 12.5.6 and 13.0.5, a vulnerability exists whereby an adversary who is authenticated as a low-privileged user in the Anomaly Detection System (ADS) may send…
• CVE-2026-2514, published 2026-03-12. Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days. In Progress Flowmon ADS versions prior to 12.5.5 and 13.0.3, a vulnerability exists whereby an adversary with access to Flowmon monitoring ports may craft malicious network data that, when processed…
• CVE-2026-2513, published 2026-03-12. Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability exists in Progress Flowmon ADS versions prior to 12.5.5 and 13.0.3, whereby an administrator who clicks a malicious link provided by an attacker may inadvertently trigger unintended…