Possibility of unintended actions when an administrator clicks a malicious link in the Progress Flowmon web application

A vulnerability exists in Progress Flowmon versions prior to 12.5.8 and 13.0.6, whereby an administrator who clicks a malicious link provided by an attacker may inadvertently trigger unintended actions within their authenticated web session.

N/A

在Web页面生成时对输入的转义处理不恰当(跨站脚本)

Progress Flowmon 跨站脚本漏洞

Progress Flowmon是Progress公司的一个实时网络流量监控工具。 Progress Flowmon 12.5.8之前版本和13.0.6之前版本存在跨站脚本漏洞，该漏洞源于管理员点击攻击者提供的恶意链接可能触发意外操作。

N/A

N/A