CVE-2024-0396

Published: Jan 17, 2024Modified: Jun 17, 2026

7.1

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Exploitability: 2.8 / Impact: 4.2

Source: NVD

Description

In Progress MOVEit Transfer versions released before 2022.0.10 (14.0.10), 2022.1.11 (14.1.11), 2023.0.8 (15.0.8), 2023.1.3 (15.1.3), an input validation issue was discovered. An authenticated user can manipulate a parameter in an HTTPS transaction. The modified transaction could lead to computational errors within MOVEit Transfer and potentially result in a denial of service.

Affected (4)

Products: Progress: Moveit Transfer

Progress

1 product

Moveit Transfer

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Progress Moveit Transfer	Before 2022.0.10
Progress Moveit Transfer	From 2022.1.0 to 2022.1.11
Progress Moveit Transfer	From 2023.0.1 to 2023.0.8
Progress Moveit Transfer	From 2023.1.0 to 2023.1.3