CVE-2025-13774: SQL injection leading to privilege escalation in Progress Flowmon ADS
Published Jan 13, 2026
·Updated
A vulnerability exists in Progress Flowmon ADS versions prior to 12.5.4 and 13.0.1 where an SQL injection vulnerability allows authenticated users to execute unintended SQL queries and commands.
Affected Software
3 affected components
Progress Flowmon ADS<12.5.4, <13.0.1
Progress Flowmon Anomaly Detection System>=12.0.0<=12.5.4
Progress Flowmon Anomaly Detection System>=13.0.0<=13.0.1
Event History
Jan 13, 2026
CVE Published
via MITRE·12:59 PM
Data Sourced
via MITRE·12:59 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-13774?
CVE-2025-13774 is rated as a high-severity vulnerability due to the potential for privilege escalation through SQL injection.
2
How do I fix CVE-2025-13774?
To mitigate CVE-2025-13774, upgrade Progress Flowmon ADS to version 12.5.4 or 13.0.1 or later.
3
Who is affected by CVE-2025-13774?
CVE-2025-13774 affects users of Progress Flowmon ADS versions prior to 12.5.4 and 13.0.1.
4
What type of vulnerability is CVE-2025-13774?
CVE-2025-13774 is an SQL injection vulnerability that can lead to privilege escalation.
5
Can CVE-2025-13774 be exploited remotely?
CVE-2025-13774 requires authentication, meaning it can only be exploited by authenticated users with access to the system.