Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-10240

Possibility of unintended actions when a user clicks a malicious link in the Progress Flowmon web application

Description

A vulnerability exists in the Progress Flowmon web application prior to version 12.5.5, whereby a user who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated session.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Progress Software Flowmon

Default version status: affected

  • Versions prior to 12.5.5affected

References