vulnerability
Progress MOVEit Transfer: CVE-2024-0396: Improper Input Validation
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:S/C:N/I:P/A:C) | Jan 17, 2024 | Dec 17, 2024 | Mar 25, 2026 |
Severity
8
CVSS
(AV:N/AC:L/Au:S/C:N/I:P/A:C)
Published
Jan 17, 2024
Added
Dec 17, 2024
Modified
Mar 25, 2026
Description
In Progress MOVEit Transfer versions released before 2022.0.10 (14.0.10), 2022.1.11 (14.1.11), 2023.0.8 (15.0.8), 2023.1.3 (15.1.3), an input validation issue was discovered. An authenticated user can manipulate a parameter in an HTTPS transaction. The modified transaction could lead to computational errors within MOVEit Transfer and potentially result in a denial of service.
Solution
progress-moveit-transfer-upgrade-latest
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.