Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

MOVEit Transfer — Vulnerabilities & Security Advisories 13

All 13 CVE vulnerabilities found in MOVEit Transfer, with AI-generated Chinese analysis, references, and POCs.

Vendor: Progress Software Corporation

CVE IDTitleCVSSSeverityPublished
CVE-2025-11235 MOVEit Transfer REST API does not require current password in order to initiate the password change process CWE-620 3.7 Low2026-01-06
CVE-2025-13147 External Service Interaction (DNS) CWE-918 5.3 Medium2025-11-19
CVE-2025-10932 AS2 module allows uncontrolled file uploads CWE-400 8.2 High2025-10-29
CVE-2025-2324 A MOVEit Transfer user configured as a Shared Account can gain unintended List permissions on a folder CWE-269 5.9 Medium2025-03-19
CVE-2024-6576 MOVEit Transfer Privilege Escalation Vulnerability CWE-287 7.3 High2024-07-29
CVE-2024-5806 MOVEit Transfer Authentication Bypass Vulnerability CWE-287 9.1 Critical2024-06-25
CVE-2024-2291 MOVEit Transfer Logging Bypass Vulnerability CWE-778 4.3 Medium2024-03-20
CVE-2024-0396 Missing Server-Side Input Validation in HTTP Parameter CWE-20 7.1 High2024-01-17
CVE-2023-6218 MOVEit Transfer Group Admin Privilege Escalation CWE-269 7.2 High2023-11-29
CVE-2023-6217 MOVEit Transfer XSS via MOVEit Gateway CWE-79 7.1 High2023-11-29
CVE-2023-42656 MOVEit Transfer Reflected XSS CWE-79 6.1 Medium2023-09-20
CVE-2023-40043 MOVEit Transfer System Administrator SQL Injection CWE-89 7.2 High2023-09-20
CVE-2023-42660 MOVEit Transfer Machine Interface SQL Injection CWE-89 8.8 High2023-09-20

All 13 known CVE vulnerabilities affecting MOVEit Transfer with full Chinese analysis, references, and POCs where available.