CVE-2023-26100

MEDIUM

Progress Flowmon < 12.2.0 - Reflected Cross-Site Scripting

Title source: llm

Description

In Progress Flowmon before 12.2.0, an application endpoint failed to sanitize user-supplied input. A threat actor could leverage a reflected XSS vulnerability to execute arbitrary code within the context of a Flowmon user's web browser.

References (2)

Core 2

Core References

Third Party Advisory

https://support.kemptechnologies.com/hc/en-us/articles/12736934205837

Product

https://www.flowmon.com/en

Scores

CVSS v3 6.1

EPSS 0.0002

EPSS Percentile 4.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-79

Status published

Products (1)

progress/flowmon_os < 12.2.0

Published Apr 21, 2023

Tracked Since Feb 18, 2026