← Back

Moveit Transfer

moveit_transfer

Vendor: Progress • 37 CVEs

CVEs (37)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-15968
1Progress
1Moveit Transfer
Jul 30, 2026
Jul 23, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before 2026.0.3.
CVE-2026-15967
1Progress
1Moveit Transfer
Jul 30, 2026
Jul 23, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Insufficient session expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before 2026.0.3.
CVE-2026-15966
1Progress
1Moveit Transfer
Jul 30, 2026
Jul 23, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Permissive cross-domain security policy with untrusted domains vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before 2026.0.3.
CVE-2026-10697
1Progress
1Moveit Transfer
Jul 30, 2026
Jul 23, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Improper Authentication vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before 2026.0.3.
CVE-2026-8801
1Progress
1Moveit Transfer
Jul 9, 2026
Jul 8, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Path equivalence: vulnerability in Progress MOVEit Transfer (File Upload modules). This issue affects MOVEit Transfer: before 2025.0.8, from 2025.1.0 before 2025.1.4.
CVE-2026-8800
1Progress
1Moveit Transfer
Jul 9, 2026
Jul 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Incorrect Authorization vulnerability in Progress MOVEit Transfer (Audit User module). This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3.
CVE-2026-8651
1Progress
1Moveit Transfer
Jul 9, 2026
Jul 8, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Limited authentication bypass by spoofing vulnerability in Progress MOVEit Transfer (HTTPS module). This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3.
CVE-2026-8650
1Progress
1Moveit Transfer
Jul 9, 2026
Jul 8, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Relative path traversal vulnerability in Progress MOVEit Transfer (Admin Settings module). This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3.
CVE-2026-8649
1Progress
1Moveit Transfer
Jul 10, 2026
Jul 8, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Improper Neutralization of Special Elements in Data Query Logic vulnerability in Progress MOVEit Transfer (Custom Reports modules). This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3.
CVE-2026-11903
1Progress
1Moveit Transfer
Jul 10, 2026
Jul 8, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Transfer (Ad Hoc module). This issue affects MOVEit Transfer: from 2026.0.0 before 2026.0.1, from 202...Show more
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Transfer (Ad Hoc module). This issue affects MOVEit Transfer: from 2026.0.0 before 2026.0.1, from 2025.1.0 before 2025.1.4, from 2025.0.0 before 2025.0.8.Show less
CVE-2026-10699
1Progress
1Moveit Transfer
Jul 10, 2026
Jul 8, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Missing release of memory after effective lifetime vulnerability in Progress MOVEit Transfer (Custom Reports modules). This issue affects MOVEit Transfer: from 2025.0.0 before 2025.0.8, from 2025.1.0 before 2025.1.4, fr...Show more
Missing release of memory after effective lifetime vulnerability in Progress MOVEit Transfer (Custom Reports modules). This issue affects MOVEit Transfer: from 2025.0.0 before 2025.0.8, from 2025.1.0 before 2025.1.4, from 2026.0.0 before 2026.0.1.Show less
CVE-2026-10698
1Progress
1Moveit Transfer
Jul 10, 2026
Jul 8, 2026
N/A· v4
7.2 HIGH· v3
N/A· v2
Improper Neutralization of Special Elements in Data Query Logic vulnerability in Progress MOVEit Transfer (Custom Reports modules). This issue affects MOVEit Transfer: from 2025.0.0 before 2025.0.8, from 2025.1.0 before...Show more
Improper Neutralization of Special Elements in Data Query Logic vulnerability in Progress MOVEit Transfer (Custom Reports modules). This issue affects MOVEit Transfer: from 2025.0.0 before 2025.0.8, from 2025.1.0 before 2025.1.4, from 2026.0.0 before 2026.0.1.Show less
CVE-2025-11235
1Progress
1Moveit Transfer
Jun 17, 2026
Jan 7, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Unverified Password Change vulnerability in Progress MOVEit Transfer on Windows (REST API modules).This issue affects MOVEit Transfer: from 2023.1.0 before 2023.1.3, from 2023.0.0 before 2023.0.8, from 2022.1.0 before 20...Show more
Unverified Password Change vulnerability in Progress MOVEit Transfer on Windows (REST API modules).This issue affects MOVEit Transfer: from 2023.1.0 before 2023.1.3, from 2023.0.0 before 2023.0.8, from 2022.1.0 before 2022.1.11, from 2022.0.0 before 2022.0.10.Show less
CVE-2025-13147
1Progress
1Moveit Transfer
Jun 17, 2026
Nov 19, 2025
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Server-Side Request Forgery (SSRF) vulnerability in Progress MOVEit Transfer.This issue affects MOVEit Transfer: before 2024.1.8, from 2025.0.0 before 2025.0.4.
CVE-2025-2324
1Progress
1Moveit Transfer
Jun 17, 2026
Mar 19, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
Improper Privilege Management vulnerability for users configured as Shared Accounts in Progress MOVEit Transfer (SFTP module) allows Privilege Escalation.This issue affects MOVEit Transfer: from 2023.1.0 before 2023.1.12...Show more
Improper Privilege Management vulnerability for users configured as Shared Accounts in Progress MOVEit Transfer (SFTP module) allows Privilege Escalation.This issue affects MOVEit Transfer: from 2023.1.0 before 2023.1.12, from 2024.0.0 before 2024.0.8, from 2024.1.0 before 2024.1.2.Show less
CVE-2024-6576
1Progress
1Moveit Transfer
Jun 17, 2026
Jul 29, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Improper Authentication vulnerability in Progress MOVEit Transfer (SFTP module) can lead to Privilege Escalation.This issue affects MOVEit Transfer: from 2023.0.0 before 2023.0.12, from 2023.1.0 before 2023.1.7, from 202...Show more
Improper Authentication vulnerability in Progress MOVEit Transfer (SFTP module) can lead to Privilege Escalation.This issue affects MOVEit Transfer: from 2023.0.0 before 2023.0.12, from 2023.1.0 before 2023.1.7, from 2024.0.0 before 2024.0.3.Show less
CVE-2024-5806
1Progress
1Moveit Transfer
Jun 17, 2026
Jun 25, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Improper Authentication vulnerability in Progress MOVEit Transfer (SFTP module) can lead to Authentication Bypass.This issue affects MOVEit Transfer: from 2023.0.0 before 2023.0.11, from 2023.1.0 before 2023.1.6, from 20...Show more
Improper Authentication vulnerability in Progress MOVEit Transfer (SFTP module) can lead to Authentication Bypass.This issue affects MOVEit Transfer: from 2023.0.0 before 2023.0.11, from 2023.1.0 before 2023.1.6, from 2024.0.0 before 2024.0.2.Show less
CVE-2024-2291
1Progress
1Moveit Transfer
Jun 17, 2026
Mar 20, 2024
N/A· v4
4.3 MEDIUM· v3
N/A· v2
In Progress MOVEit Transfer versions released before 2022.0.11 (14.0.11), 2022.1.12 (14.1.12), 2023.0.9 (15.0.9), 2023.1.4 (15.1.4), a logging bypass vulnerability has been discovered.  An authenticated user could manip...Show more
In Progress MOVEit Transfer versions released before 2022.0.11 (14.0.11), 2022.1.12 (14.1.12), 2023.0.9 (15.0.9), 2023.1.4 (15.1.4), a logging bypass vulnerability has been discovered.  An authenticated user could manipulate a request to bypass the logging mechanism within the web application which results in user activity not being logged properly.Show less
CVE-2024-0396
1Progress
1Moveit Transfer
Jun 17, 2026
Jan 17, 2024
N/A· v4
7.1 HIGH· v3
N/A· v2
In Progress MOVEit Transfer versions released before 2022.0.10 (14.0.10), 2022.1.11 (14.1.11), 2023.0.8 (15.0.8), 2023.1.3 (15.1.3), an input validation issue was discovered. An authenticated user can manipulate a para...Show more
In Progress MOVEit Transfer versions released before 2022.0.10 (14.0.10), 2022.1.11 (14.1.11), 2023.0.8 (15.0.8), 2023.1.3 (15.1.3), an input validation issue was discovered. An authenticated user can manipulate a parameter in an HTTPS transaction. The modified transaction could lead to computational errors within MOVEit Transfer and potentially result in a denial of service. Show less
CVE-2023-6218
1Progress
1Moveit Transfer
Jun 17, 2026
Nov 29, 2023
N/A· v4
7.2 HIGH· v3
N/A· v2
In Progress MOVEit Transfer versions released before 2022.0.9 (14.0.9), 2022.1.10 (14.1.10), 2023.0.7 (15.0.7), a privilege escalation path associated with group administrators has been identified.  It is possible for a...Show more
In Progress MOVEit Transfer versions released before 2022.0.9 (14.0.9), 2022.1.10 (14.1.10), 2023.0.7 (15.0.7), a privilege escalation path associated with group administrators has been identified.  It is possible for a group administrator to elevate a group members permissions to the role of an organization administrator. Show less