medium6.1
CVE-2023-26100
In Progress Flowmon before 12.2.0, an application endpoint failed to sanitize user-supplied input.
Impact
In Progress Flowmon before 12.2.0, an application endpoint failed to sanitize user-supplied input. A threat actor could leverage a reflected XSS vulnerability to execute arbitrary code within the context of a Flowmon user's web browser.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Progress | Flowmon Os | before 12.2.0 |