Records437All Threatist records
Exploited (KEV)10In CISA KEV
CVSS critical95CVSS 9.0–10.0
CVSS high231CVSS 7.0–8.9
Exploited now
Progress records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 57
Authentication bypass by primary weakness vulnerability in Progress Software MOVEit Automation allows Authentication Bypass.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0504 · Published 2026-04-30 · Fixed in 2025.0.9, 2024.1.8 CWE-305
Priority MEDIUM 46
Improper input validation vulnerability in Progress Software MOVEit Automation allows Privilege Escalation.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03321 · Published 2026-04-30 · Fixed in 2025.1.5, 2025.0.9 +1 CWE-20
Priority LOW 39
Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation allows Flooding.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00395 · Published 2026-05-20 · Fixed in 2025.0.11, 2025.1.7 CWE-770
Priority LOW 33
Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation allows Excessive Allocation.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00364 · Published 2026-05-20 · Fixed in 2025.0.11, 2025.1.7 CWE-770
Priority LOW 33
Incorrect default permissions vulnerability in Progress Software MOVEit Automation allows Retrieve Embedded Sensitive Data.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0028 · Published 2026-05-20 · Fixed in 2025.0.11, 2025.1.7 CWE-276
Priority LOW 33
Uncontrolled Memory Allocation vulnerability in Progress Software MOVEit Automation allows Excessive Allocation.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00348 · Published 2026-05-20 · Fixed in 2025.0.11, 2025.1.7 CWE-789
Priority LOW 32
The Progress MOVEit Automation configuration export function prior to 2024.0.0 uses a cryptographic method with insufficient bit length.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00235 · Published 2024-05-22 · Fixed in 2024.0.0 CWE-327
Priority LOW 31
An issue was discovered in Progress MOVEit Automation Web Admin.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01908 · Published 2020-05-14 · No fix listed CWE-79
Open these records in search →