Ipswitch Moveit Transfer vulnerabilities
3 known vulnerabilities affecting ipswitch/moveit_transfer.
Total CVEs
3
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL3
Vulnerabilities
Page 1 of 1
CVE-2019-16383P2CRITICALCVSS 9.4PoC≥ 10.2.0, < 10.2.4≥ 11.0, < 11.0.2+1 more2019-09-24
CVE-2019-16383 [CRITICAL] CWE-89 CVE-2019-16383: MOVEit.DMZ.WebApi.dll in Progress MOVEit Transfer 2018 SP2 before 10.2.4, 2019 before 11.0.2, and 20
MOVEit.DMZ.WebApi.dll in Progress MOVEit Transfer 2018 SP2 before 10.2.4, 2019 before 11.0.2, and 2019.1 before 11.1.1 allows an unauthenticated attacker to gain unauthorized access to the database. Depending on the database engine being used (MySQL, Microsoft SQL Server, or Azure SQL), an attacker may be able to infer information about the structu
nvd
CVE-2019-18464P2CRITICALCVSS 9.8≥ 10.2.0, < 10.2.6≥ 11.0, < 11.0.4+1 more2019-10-31
CVE-2019-18464 [CRITICAL] CWE-89 CVE-2019-18464: In Progress MOVEit Transfer 10.2 before 10.2.6 (2018.3), 11.0 before 11.0.4 (2019.0.4), and 11.1 bef
In Progress MOVEit Transfer 10.2 before 10.2.6 (2018.3), 11.0 before 11.0.4 (2019.0.4), and 11.1 before 11.1.3 (2019.1.3), multiple SQL Injection vulnerabilities have been found in the REST API that could allow an unauthenticated attacker to gain unauthorized access to the database. Depending on the database engine being used (MySQL, Microsoft SQL
nvd
CVE-2019-18465P3CRITICALCVSS 9.8≥ 11.1, < 11.1.32019-10-31
CVE-2019-18465 [CRITICAL] CWE-306 CVE-2019-18465: In Progress MOVEit Transfer 11.1 before 11.1.3, a vulnerability has been found that could allow an a
In Progress MOVEit Transfer 11.1 before 11.1.3, a vulnerability has been found that could allow an attacker to sign in without full credentials via the SSH (SFTP) interface. The vulnerability affects only certain SSH (SFTP) configurations, and is applicable only if the MySQL database is being used.
nvd