Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Priority MEDIUM 42

In Progress MOVEit Transfer 2019.1 before 2019.1.4 and 2019.2 before 2019.2.1, a REST API endpoint failed to adequately sanitize malicious input, which could allow an authenticated attacker to execute arbitrary code in a…

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.01674 Published 2020-02-14 No fix listed CWE-79
Priority MEDIUM 41

In Progress MOVEit Transfer 2019.1 before 2019.1.4 and 2019.2 before 2019.2.1, multiple SQL Injection vulnerabilities have been found in the REST API that could allow an authenticated attacker to gain unauthorized access…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01233 Published 2020-02-14 No fix listed CWE-89