Possibility of unintended actions when viewing maliciously crafted network data in Progress Flowmon ADS web application

In Progress Flowmon ADS versions prior to 12.5.5 and 13.0.3, a vulnerability exists whereby an adversary with access to Flowmon monitoring ports may craft malicious network data that, when processed by Flowmon ADS and viewed by an authenticated user, could result in unintended actions being executed in the user's browser context.

N/A

在Web页面生成时对输入的转义处理不恰当(跨站脚本)

Progress Flowmon ADS 跨站脚本漏洞

Progress Flowmon ADS是美国Progress公司的一款网络流量分析与异常检测系统。 Progress Flowmon ADS 12.5.5之前版本和13.0.3之前版本存在跨站脚本漏洞，该漏洞源于处理特制网络数据可能导致在用户浏览器环境中执行意外操作。

N/A

N/A