vulnerability
Progress MOVEit Transfer: CVE-2024-0396: Improper Input Validation
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:S/C:N/I:P/A:C) | Jan 17, 2024 | Dec 17, 2024 | Feb 11, 2026 |
Severity
8
CVSS
(AV:N/AC:L/Au:S/C:N/I:P/A:C)
Published
Jan 17, 2024
Added
Dec 17, 2024
Modified
Feb 11, 2026
Description
In Progress MOVEit Transfer versions released before 2022.0.10 (14.0.10), 2022.1.11 (14.1.11), 2023.0.8 (15.0.8), 2023.1.3 (15.1.3), an input validation issue was discovered. An authenticated user can manipulate a parameter in an HTTPS transaction. The modified transaction could lead to computational errors within MOVEit Transfer and potentially result in a denial of service.
Solution
progress-moveit-transfer-upgrade-latest
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.