WID-SEC-W-2023-1671

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Progress Software MOVEit: Mehrere Schwachstellen

view advisory published 2023-07-05

Ein Angreifer kann mehrere Schwachstellen in Progress Software MOVEit ausnutzen, um Daten zu manipulieren oder einen Denial of Service zu verursachen.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2023-36934UScritical9.1—
In Progress MOVEit Transfer before 2020.1.11 (12.1.11), 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.0.4 (15.0.4), a SQL injection vulnerabi…
CVE-2023-36933UShigh7.5—
In Progress MOVEit Transfer before 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.0.4 (15.0.4), it is possible for an attacker to invoke a met…
CVE-2023-36932UShigh8.1—
In Progress MOVEit Transfer before 2020.1.11 (12.1.11), 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.0.4 (15.0.4), multiple SQL injection vu…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan