WID-SEC-W-2023-1413

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Progress Software MOVEit: Schwachstelle ermöglicht SQL Injection

view advisory published 2023-06-11

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Progress Software MOVEit ausnutzen, um Daten zu manipulieren oder offenzulegen.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2023-35036UScritical9.1—
In Progress MOVEit Transfer before 2021.0.7 (13.0.7), 2021.1.5 (13.1.5), 2022.0.5 (14.0.5), 2022.1.6 (14.1.6), and 2023.0.2 (15.0.2), SQL injection vulnerabilities have been found…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan