What is the CVSS score of CVE-2025-13444?

CVE-2025-13444 has a CVSS 3.1 base score of 8.4 (High). CVSS vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Ecs Connection Manager are affected by CVE-2025-13444?

CVE-2025-13444 presents notable security risk, a OS command injection vulnerability rated CVSS 8.4.

How to fix or mitigate CVE-2025-13444?

Within 7 days: Identify all affected systems and apply vendor patches promptly. Validate that input sanitization is in place for all user-controlled parameters.

Ecs Connection Manager CVE-2025-13444

HIGH

OS Command Injection (CWE-78)

2026-01-13 security@progress.com

RCE Command Injection Ecs Connection Manager Moveit Waf Connection Manager For Objectscale Loadmaster Multi Tenant Hypervisor

8.4

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.4 HIGH

AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Jan 13, 2026 - 15:15 nvd

HIGH 8.4

DescriptionCVE.org

OS Command Injection Remote Code Execution Vulnerability in API in Progress LoadMaster allows an authenticated attacker with “User Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the API input parameters

AnalysisAI

Technical ContextAI

Classified as CWE-78 (OS Command Injection). Affects the API input component of Connection Manager For Objectscale. OS Command Injection Remote Code Execution Vulnerability in API in Progress LoadMaster allows an authenticated attacker with “User Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the API input parameters