PT-2025-41378 · Flowmon · Flowmon

Kentaro Kawane · Published 2025-10-09 · Updated 2025-10-09 · CVE-2025-10239

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Flowmon versions prior to 12.5.5

Description Flowmon network monitoring solutions are affected by an issue that allows an authenticated administrator to execute additional unintended commands within scripts designed for troubleshooting. This indicates a command injection or script manipulation vulnerability. The issue requires administrator privileges and access to the management interface.

Recommendations Update Flowmon to version 12.5.5 or later.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2025-10239

Affected Products

Flowmon

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-10239 · Security Note
• https://community.progress.com/s/article/CVE-2025-10239 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1976292423853593036 · Twitter Post
• https://twitter.com/CVEnew/status/1976273407709725166 · Twitter Post
• https://t.me/cveNotify/137961 · Telegram Post
• https://twitter.com/CveTodo/status/1976278534281646143 · Twitter Post