CVE-2025-10239: Unintended command execution via troubleshooting scripts in Progress Flowmon
In Flowmon versions prior to 12.5.5, a vulnerability has been identified that allows a user with administrator privileges and access to the management interface to execute additional unintended commands within scripts intended for troubleshooting purposes.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10239?
CVE-2025-10239 has been classified as a critical severity vulnerability due to its potential for unauthorized command execution.
How do I fix CVE-2025-10239?
To mitigate CVE-2025-10239, upgrade Progress Flowmon to version 12.5.5 or later.
Who is affected by CVE-2025-10239?
CVE-2025-10239 affects users of Progress Flowmon versions prior to 12.5.5 with administrator access.
What type of vulnerability is CVE-2025-10239?
CVE-2025-10239 is a command injection vulnerability that allows unintended command execution.
What are the consequences of CVE-2025-10239?
Exploitation of CVE-2025-10239 could allow an attacker to execute unauthorized commands on the affected system.