Most severe vulnerabilities for "progress moveit transfer" 2023.1.0

Where

AND

Sort:

Progress MOVEit TransferMOVEit Transfer Authentication Bypass Vulnerability

Risk 63

Severity

9.8

EPSS

0.50%

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Improper Authentication vulnerability in Progress MOVEit Transfer (SFTP module) can lead to Authentication Bypass.This issue affects MOVEit Transfer: from 2023.0.0 before 2023.0.11, from 2023.1.0 before 2023.1.6, from 2024.0.0 before 2024.0.2.

First published (updated )

CVE-2024-5806

Progress MOVEit TransferA MOVEit Transfer user configured as a Shared Account can gain unintended List permissions on a folder

Risk 79

Severity

8.8

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N

Improper Privilege Management vulnerability for users configured as Shared Accounts in Progress MOVEit Transfer (SFTP module) allows Privilege Escalation.This issue affects MOVEit Transfer: from 2023.1.0 before 2023.1.12, from 2024.0.0 before 2024.0.8, from 2024.1.0 before 2024.1.2.

First published (updated )

CVE-2025-2324

Progress MOVEit TransferMOVEit Transfer REST API does not require current password in order to initiate the password change process

Risk 43

Severity

7.5

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Unverified Password Change vulnerability in Progress MOVEit Transfer on Windows (REST API modules).This issue affects MOVEit Transfer: from 2023.1.0 before 2023.1.3, from 2023.0.0 before 2023.0.8, from 2022.1.0 before 2022.1.11, from 2022.0.0 before 2022.0.10.

First published (updated )

CVE-2025-11235

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Trending

Progress MOVEit TransferMOVEit Transfer Authentication Bypass Vulnerability

Progress MOVEit TransferA MOVEit Transfer user configured as a Shared Account can gain unintended List permissions on a folder

Progress MOVEit TransferMOVEit Transfer REST API does not require current password in order to initiate the password change process

Company

Resources

Contact