CVE-2025-13447: OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster
OS Command Injection Remote Code Execution Vulnerability in API in Progress LoadMaster allows an authenticated attacker with “User Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the API input parameters
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13447?
CVE-2025-13447 has a high severity rating due to its potential for remote code execution.
How do I fix CVE-2025-13447?
To fix CVE-2025-13447, apply the latest security patches provided by Progress for the LoadMaster software.
Who is affected by CVE-2025-13447?
CVE-2025-13447 affects users of Progress LoadMaster with 'User Administration' permissions.
What types of attacks are possible with CVE-2025-13447?
CVE-2025-13447 allows authenticated attackers to execute arbitrary OS commands on the LoadMaster appliance.
Is CVE-2025-13447 being actively exploited?
As of the latest reports, there is evidence suggesting that CVE-2025-13447 may be actively exploited in the wild.