Skip to content
Progress Moveit Transfer vulnerabilities
-
progress moveit transfer
MOVEit Transfer Identity validation flaw in SFTP authentication
CVE-2026-89077
7.5 High
-
progress moveit transfer
MOVEit Transfer SQL injection in custom reporting
CVE-2026-89076
7.2 High
-
progress moveit transfer
MOVEit Transfer Local Disclosure of Session Information Vulnerability
CVE-2026-89075
7.3 High
-
progress moveit transfer
MOVEit Transfer Email MFA Bypass
CVE-2026-89074
7.5 High
-
progress moveit transfer
MOVEit Transfer Access restriction bypass in OAuth authentication
CVE-2026-89073
7.5 High
-
progress moveit transfer
MOVEit Transfer Authorization Flaw in Certificate Management
CVE-2026-89072
7.5 High
-
progress moveit transfer
MOVEit Transfer LDAP injection in certificate-based authentication
CVE-2026-89071
7.5 High
-
progress moveit transfer
MOVEit Transfer OIDC Authentication Replay Vulnerability
CVE-2026-89070
7.5 High
-
progress moveit transfer
MOVEit Transfer Stored XSS Vulnerability in Ad Hoc Packages
CVE-2026-89069
8.0 High
-
progress moveit transfer
MOVEit Transfer Authentication bypass in LDAP sign-on
CVE-2026-89068
8.1 High
-
progress moveit transfer
MOVEit Transfer Secure Messaging Authentication Bypass
CVE-2026-89067
8.8 High
-
progress moveit transfer
MOVEit Transfer Service Directory Writable by Local Users Enables Local Privilege Escalation
CVE-2026-87093
8.8 High
-
progress moveit transfer
Stored XSS vulnerability in MOVEit Transfer
CVE-2026-15968
7.1 High
-
progress moveit transfer
MOVEit Transfer refresh-token processing does not enforce updated account restrictions
CVE-2026-15967
7.5 High
-
progress moveit transfer
Improper CORS handling in MOVEit Transfer
CVE-2026-15966
7.5 High
-
progress moveit transfer
MFA Bypass in MOVEit Transfer
CVE-2026-10697
7.5 High
-
progress moveit transfer
File Extension Restriction Bypass in MOVEit Transfer
CVE-2026-8801
3.5 Low
-
progress moveit transfer
Cross-Org External Token Metadata accessible to AuditUser role
CVE-2026-8800
2.7 Low
-
progress moveit transfer
IPv6 Loopback Spoof via Trusted Host Header Bypasses Origin Check in MOVEit Transfer
CVE-2026-8651
3.7 Low
-
progress moveit transfer
Authenticated Path Traversal allows MOVEit admins to view arbitrary system files
CVE-2026-8650
4.5 Medium
-
progress moveit transfer
Institution scope bypass vulnerability in custom reports
CVE-2026-8649
6.4 Medium
-
progress moveit transfer
Stored XSS in MOVEit Transfer Ad Hoc module
CVE-2026-11903
8.0 High
-
progress moveit transfer
Memory leak in SFTP service can result in a denial of service in MOVEit Transfer
CVE-2026-10699
7.5 High
-
progress moveit transfer
Table scope bypass vulnerability in custom reports
CVE-2026-10698
7.2 High
-
progress moveit transfer
MOVEit Transfer REST API does not require current password in order to initiate the password change process
CVE-2025-11235
3.7 Low
-
progress moveit transfer
External Service Interaction (DNS)
CVE-2025-13147
5.3 Medium
-
progress moveit transfer
A MOVEit Transfer user configured as a Shared Account can gain unintended List permissions on a folder
CVE-2025-2324
5.9 Medium
-
progress moveit transfer
MOVEit Transfer Privilege Escalation Vulnerability
CVE-2024-6576
7.3 High
-
progress moveit transfer
MOVEit Transfer Authentication Bypass Vulnerability
CVE-2024-5806
Public exploit
EPSS 81.5%
9.1 Critical
-
progress moveit transfer
MOVEit Transfer Logging Bypass Vulnerability
CVE-2024-2291
4.3 Medium
-
progress moveit transfer
Missing Server-Side Input Validation in HTTP Parameter
CVE-2024-0396
7.1 High
-
progress moveit transfer
MOVEit Transfer Group Admin Privilege Escalation
CVE-2023-6218
7.2 High
-
progress moveit transfer
MOVEit Transfer XSS via MOVEit Gateway
CVE-2023-6217
7.1 High
-
progress moveit transfer
MOVEit Transfer Reflected XSS
CVE-2023-42656
6.1 Medium
-
progress moveit transfer
MOVEit Transfer System Administrator SQL Injection
CVE-2023-40043
7.2 High
-
progress moveit transfer
MOVEit Transfer Machine Interface SQL Injection
CVE-2023-42660
8.8 High
-
progress moveit transfer
In Progress MOVEit Transfer before 2020.1.11 (12.1.11), 2021.0.9 (13.0.9), 2021.1.7 (13.1.7),...
CVE-2023-36934
EPSS 95.2%
9.1 Critical
-
progress moveit transfer
In Progress MOVEit Transfer before 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022...
CVE-2023-36933
EPSS 72.2%
7.5 High
-
progress moveit transfer
In Progress MOVEit Transfer before 2020.1.11 (12.1.11), 2021.0.9 (13.0.9), 2021.1.7 (13.1.7),...
CVE-2023-36932
EPSS 81.1%
8.1 High
-
progress moveit transfer
Progress MOVEit Transfer has a privilege escalation vulnerability that can be addressed with DLL...
CVE-2023-35708
EPSS 96.7%
9.8 Critical
-
progress moveit transfer
In Progress MOVEit Transfer before 2021.0.7 (13.0.7), 2021.1.5 (13.1.5), 2022.0.5 (14.0.5), 2022...
CVE-2023-35036
EPSS 12.8%
9.1 Critical
-
progress moveit transfer, moveit cloud +1 more
In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022...
CVE-2023-34362
In KEVPublic exploit
EPSS 99.9%
9.8 Critical
-
progress moveit transfer
In certain Progress MOVEit Transfer versions before 2021.0.4 (aka 13.0.4), SQL injection in the...
CVE-2021-38159
9.8 Critical
-
progress moveit transfer
In certain Progress MOVEit Transfer versions before 2021.0.3 (aka 13.0.3), SQL injection in the...
CVE-2021-37614
8.8 High
-
progress moveit transfer
In Progress MOVEit Transfer before 2019.0.6 (11.0.6), 2019.1.x before 2019.1.5 (11.1.5), 2019.2.x...
CVE-2021-33894
8.8 High
-
progress moveit transfer
In Progress MOVEit Transfer before 2021.0 (13.0), a SQL injection vulnerability has been found in...
CVE-2021-31827
8.8 High
-
progress moveit transfer
In Progress MOVEit Transfer before 2020.1, a malicious user could craft and store a payload...
CVE-2020-28647
Public exploit
5.4 Medium
-
progess moveit transfer
In Progress MOVEit Transfer 2019.1 before 2019.1.4 and 2019.2 before 2019.2.1, a REST API...
CVE-2020-8612
9.0 Critical
-
progess moveit transfer
In Progress MOVEit Transfer 2019.1 before 2019.1.4 and 2019.2 before 2019.2.1, multiple SQL...
CVE-2020-8611
8.8 High