Moveit Transfer

moveit_transfer

Vendor: Progress • 49 CVEs

CVEs (49)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-89077 1Progress 1Moveit Transfer Oct 19, 2026 Oct 14, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Incorrect implementation of authentication algorithm vulnerability in Progress MOVEit Transfer (SFTP module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.
CVE-2026-89076 1Progress 1Moveit Transfer Oct 19, 2026 Oct 14, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Progress MOVEit Transfer (Custom Reports module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0...Show more Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Progress MOVEit Transfer (Custom Reports module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.Show less
CVE-2026-89075 1Progress 1Moveit Transfer Oct 19, 2026 Oct 14, 2026 N/A· v4 7.3 HIGH· v3 N/A· v2 Insecure Storage of Sensitive Information vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.
CVE-2026-89074 1Progress 1Moveit Transfer Oct 19, 2026 Oct 14, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper handling of unicode encoding vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.
CVE-2026-89073 1Progress 1Moveit Transfer Oct 19, 2026 Oct 14, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Insufficient Session Expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.
CVE-2026-89072 1Progress 1Moveit Transfer Oct 19, 2026 Oct 14, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Incorrect Authorization vulnerability in Progress MOVEit Transfer (Client Certificates module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.
CVE-2026-89071 1Progress 1Moveit Transfer Oct 19, 2026 Oct 14, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Progress MOVEit Transfer (LDAP module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before...Show more Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Progress MOVEit Transfer (LDAP module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.Show less
CVE-2026-89070 1Progress 1Moveit Transfer Oct 19, 2026 Oct 14, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer (OIDC module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.
CVE-2026-89069 1Progress 1Moveit Transfer Oct 19, 2026 Oct 14, 2026 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Transfer (Ad Hoc module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 befor...Show more Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Transfer (Ad Hoc module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.Show less
CVE-2026-89068 1Progress 1Moveit Transfer Oct 19, 2026 Oct 14, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Missing critical step in authentication vulnerability in Progress MOVEit Transfer (LDAP module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.
CVE-2026-89067 1Progress 1Moveit Transfer Oct 19, 2026 Oct 14, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Authentication bypass using an alternate path or channel vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.
CVE-2026-87093 1Progress 1Moveit Transfer Oct 16, 2026 Oct 14, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Incorrect Permission Assignment for Critical Resource vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4.
CVE-2026-15968 1Progress 1Moveit Transfer Oct 24, 2026 Jul 23, 2026 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before 2026.0.3.
CVE-2026-15967 1Progress 1Moveit Transfer Oct 24, 2026 Jul 23, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Insufficient session expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before 2026.0.3.
CVE-2026-15966 1Progress 1Moveit Transfer Oct 24, 2026 Jul 23, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Permissive cross-domain security policy with untrusted domains vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before 2026.0.3.
CVE-2026-10697 1Progress 1Moveit Transfer Oct 24, 2026 Jul 23, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Improper Authentication vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before 2026.0.3.
CVE-2026-8801 1Progress 1Moveit Transfer Jul 9, 2026 Jul 8, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Path equivalence: vulnerability in Progress MOVEit Transfer (File Upload modules). This issue affects MOVEit Transfer: before 2025.0.8, from 2025.1.0 before 2025.1.4.
CVE-2026-8800 1Progress 1Moveit Transfer Oct 25, 2026 Jul 8, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Incorrect Authorization vulnerability in Progress MOVEit Transfer (Audit User module). This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3.
CVE-2026-8651 1Progress 1Moveit Transfer Oct 25, 2026 Jul 8, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Limited authentication bypass by spoofing vulnerability in Progress MOVEit Transfer (HTTPS module). This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3.
CVE-2026-8650 1Progress 1Moveit Transfer Oct 25, 2026 Jul 8, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Relative path traversal vulnerability in Progress MOVEit Transfer (Admin Settings module). This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3.

12 3 Next