Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Priority LOW 33

In Progress MOVEit Transfer versions released before 2022.0.9 (14.0.9), 2022.1.10 (14.1.10), 2023.0.7 (15.0.7), a privilege escalation path associated with group administrators has been identified.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00696 Published 2023-11-29 Fixed in 2023.1.0(15.1.0), 2023.0.7 (15.0.7) +2 CWE-269
TI-2023-05710 CVE-2023-6217 · GHSA-qmwh-wq42-5vwq

MOVEit Transfer XSS via MOVEit Gateway

Priority LOW 32

In Progress MOVEit Transfer versions released before 2022.0.9 (14.0.9), 2022.1.10 (14.1.10), 2023.0.7 (15.0.7), a reflected cross-site scripting (XSS) vulnerability has been identified when MOVEit Gateway is used in conj…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00511 Published 2023-11-29 Fixed in 2023.1.0(15.1.0), 2023.0.7 (15.0.7) +2 CWE-79