CVE-2023-36933

Published: Jul 5, 2023Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

In Progress MOVEit Transfer before 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.0.4 (15.0.4), it is possible for an attacker to invoke a method that results in an unhandled exception. Triggering this workflow can cause the MOVEit Transfer application to terminate unexpectedly.

Affected (6)

Products: Progress: Moveit Transfer

Progress

1 product

Moveit Transfer

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Progress Moveit Transfer	Before 2020.1.11
Progress Moveit Transfer	From 2021.0 to 2021.0.9
Progress Moveit Transfer	From 2021.1.0 to 2021.1.7
Progress Moveit Transfer	From 2022.0.0 to 2022.0.7
Progress Moveit Transfer	From 2022.1.0 to 2022.1.8
Progress Moveit Transfer	From 2023.0.0 to 2023.0.4