vulnerability
Progress MOVEit Transfer Critical Vulnerability (CVE-2023-35036): SQL Injection (Remote)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 10 | (AV:N/AC:L/Au:N/C:C/I:C/A:C) | Jun 9, 2023 | Jun 12, 2023 | Oct 31, 2024 |
Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
Jun 9, 2023
Added
Jun 12, 2023
Modified
Oct 31, 2024
Description
Multiple SQL injection vulnerabilities have been identified in the MOVEit Transfer web application that could allow an un-authenticated attacker to gain unauthorized access to the MOVEit Transfer database
Solution
progress-moveit-transfer-cve-2023-35036
References
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.