← Database

CVE-2025-13447

HIGH CVSS: 8.4 Published: 2026-01-13 Modified: 2026-06-17

Description

OS Command Injection Remote Code Execution Vulnerability in API in Progress LoadMaster allows an authenticated attacker with “User Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the API input parameters

Affected Platforms

Progress Multi-Tenant HypervisorProgress Moveit WafProgress Ecs Connection ManagerProgress Connection Manager For Objectscale*Progress Loadmaster

Weakness Type

CWE-78

References