vulnerability
Progress MOVEit Transfer Critical Vulnerability (CVE-2023-35036): SQL Injection (Remote)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 10 | (AV:N/AC:L/Au:N/C:C/I:C/A:C) | Jun 9, 2023 | Jun 12, 2023 | Feb 10, 2026 |
Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
Jun 9, 2023
Added
Jun 12, 2023
Modified
Feb 10, 2026
Description
Multiple SQL injection vulnerabilities have been identified in the MOVEit Transfer web application that could allow an un-authenticated attacker to gain unauthorized access to the MOVEit Transfer database
Solution
progress-moveit-transfer-upgrade-latest
References
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.