High severity8.8NVD Advisory· Published Jan 13, 2026· Updated Jun 17, 2026

CVE-2025-13774

Description

A vulnerability exists in Progress Flowmon ADS versions prior to 12.5.4 and 13.0.1 where an SQL injection vulnerability allows authenticated users to execute unintended SQL queries and commands.

Affected products

Progress (organisation)/Flowmon Anomaly Detection System
cpe:2.3:a:progress:flowmon_anomaly_detection_system:*:*:*:*:*:*:*:*
Range: >=12.0.0,<=12.5.4
Progress (organisation)/Flowmonllm-fuzzy
Range: <12.5.4, <13.0.1
Progress Software/Flowmon ADSv5
Range: Flowmon ADS 12 versions prior to 12.5.4

Patches

Vulnerability mechanics

References

community.progress.com/s/article/Flowmon-ADS-CVE-2025-13774nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000