Most Exploited Internet-Facing Products

MEIFP

Back to Ranking

Progress Software

Products: Flowmon · LoadMaster

40.6

Score

2

CVEs

1

Active

1

PoC

1

KEV

#66

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2024-2389	2024-04-02	10.0v3.1	POC	—	Low	None	YES	0.0	Flowmon	In Flowmon versions prior to 11.1.14 and 12.3.5, an operating system command injection vulnerability has been identified. An unauthenticated user can gain entry to the system via the Flowmon management interface, allowing for the execution of arbitrary system commands.
CVE-2024-1212	2024-02-21	10.0v3.1	ACTIVE		Low	None	YES	40.6	LoadMaster	Unauthenticated remote attackers can access the system through the LoadMaster management interface, enabling arbitrary system command execution.

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3