VULNERABILITY INTELLIGENCE
CVE-2025-13447
CVSS score8.4 HIGH
EPSS probability27.22%
CISA KEVNot currently listed
Published2026-01-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Description
OS Command Injection Remote Code Execution Vulnerability in API in Progress LoadMaster allows an authenticated attacker with “User Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the API input parameters
Weakness classification
- nvd@nist.gov: CWE-78
Primary references
- security@progress.com — Vendor Advisory
- security@progress.com — Vendor Advisory
- security@progress.com — Vendor Advisory
- security@progress.com — Vendor Advisory