PT-2026-24948 · Progress · Flowmon Ads

CVE-2026-2513 · Publicado 2026-03-12 · Atualizado 2026-03-13

Positive Technologies (AI Summary)

CVSS v4.0

8.6

Alta

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Progress Flowmon ADS versions prior to 12.5.5 and 13.0.3

Description A security issue exists in Progress Flowmon ADS where an administrator clicking a malicious link provided by an attacker could unintentionally execute unwanted actions within their active web session.

Recommendations Update Progress Flowmon ADS to version 12.5.5 or later. Update Progress Flowmon ADS to version 13.0.3 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-2513

Produtos afetados

Flowmon Ads

Referências · 4

• https://twitter.com/CVEnew/status/2032410965510418612 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-2513 · Nota de Segurança
• https://t.me/CVEtracker/47254 · Publicação no Telegram
• https://community.progress.com/s/article/CVE-2026-2513-Progress-Flowmon-ADS · Aviso do Fabricante