Lucene search
+L

13 matches found

Cvelist
Cvelist
•added 2026/05/20 2:06 p.m.•58 views

CVE-2026-8485 Uncontrolled Memory Allocation vulnerability in Progress Software MOVEit Automation

Uncontrolled Memory Allocation vulnerability in Progress Software MOVEit Automation allows Excessive Allocation. This issue affects MOVEit Automation: before 2025.0.11, from 2025.1.0 before 2025.1.7...

5.9CVSS0.00435EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/04/30 3:07 p.m.•10 views

CVE-2026-5174 Improper Access Control Vulnerability in Progress MOVEit Automation

Improper input validation vulnerability in Progress Software MOVEit Automation allows Privilege Escalation. This issue affects MOVEit Automation: from 2025.1.0 before 2025.1.5, from 2025.0.0 before 2025.0.9, from 2024.0.0 before 2024.1.8, versions prior to 2024.0.0...

7.7CVSS5.9AI score0.00495EPSS
SaveExploits0References1
CVE
CVE
•added 2026/04/30 3:06 p.m.•61 views

CVE-2026-4670

MOVEit Automation (Progress Software) is affected by two CVEs. CVE-2026-4670 is an authentication bypass due to a primary weakness impacting MOVEit Automation releases older than 2025.0.9, 2024.1.x, and 2024.0.x series; CVSSv3.1 is 9.8 (Network, required none, user interaction none, confidentiali...

9.8CVSS8.1AI score0.00611EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
•added 2024/05/30 12:00 a.m.•45 views

Ipswitch MOVEit DMZ < 2024.0.0 (16_0_0)

The version of Ipswitch MOVEit DMZ installed on the remote host is prior to 2024.0.0. It is, therefore, affected by a vulnerability as referenced in the 000258478 advisory. - The Progress MOVEit Automation configuration export function prior to 2024.0.0 uses a cryptographic method with insufficie...

7.5CVSS7AI score0.00235EPSS
SaveExploits0References2
NVD
NVD
•added 2024/05/22 5:16 p.m.•36 views

CVE-2024-4563

The Progress MOVEit Automation configuration export function prior to 2024.0.0 uses a cryptographic method with insufficient bit length...

7.5CVSS6.2AI score0.00235EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/05/22 5:01 p.m.•38 views

CVE-2024-4563 The Progress MOVEit Automation Configuration Export Function Uses a Cryptographic Method with Insufficient Bit Length

The Progress MOVEit Automation configuration export function prior to 2024.0.0 uses a cryptographic method with insufficient bit length...

6.1CVSS6.8AI score0.00235EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/05/22 5:01 p.m.•42 views

CVE-2024-4563 The Progress MOVEit Automation Configuration Export Function Uses a Cryptographic Method with Insufficient Bit Length

The Progress MOVEit Automation configuration export function prior to 2024.0.0 uses a cryptographic method with insufficient bit length...

6.1CVSS6.2AI score0.00235EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/05/22 12:00 a.m.•21 views

Progress Software Progress MOVEit Automation 安全漏洞

Progress Software Progress MOVEit Automation is a suite of hosted file transfer software from Progress Software, USA. The software supports features such as sensitive data transfer and workflow automation. A security vulnerability exists in Progress Software Progress MOVEit Automation that stems...

7.5CVSS6.6AI score0.00235EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/22 12:00 a.m.•9 views

CVE-2024-4563: Use of a Broken or Risky Cryptographic Algorithm

The Progress MOVEit Automation configuration export function prior to 2024.0.0 uses a cryptographic method with insufficient bit length...

7.5CVSS5.8AI score0.00235EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/05/22 12:00 a.m.•5 views

PT-2024-31715

Name of the Vulnerable Software and Affected Versions: Progress MOVEit Automation versions prior to 2024.0.1 Description: The issue concerns the use of a cryptographic method with insufficient bit length in the configuration export function. This affects versions prior to 2024.0.1. Recommendation...

7.5CVSS5.8AI score0.00235EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2020/05/14 5:34 p.m.•50 views

CVE-2020-12677

An issue was discovered in Progress MOVEit Automation Web Admin. A Web Admin application endpoint failed to adequately sanitize malicious input, which could allow an unauthenticated attacker to execute arbitrary code in a victim's browser, aka XSS. This affects 2018 - 2018.0 prior to 2018.0.3, 20...

6.7AI score0.01908EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/14 12:00 a.m.•8 views

CVE-2020-12677: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Progress MOVEit Automation Web Admin. A Web Admin application endpoint failed to adequately sanitize malicious input, which could allow an unauthenticated attacker to execute arbitrary code in a victim's browser, aka XSS. This affects 2018 - 2018.0 prior to 2018.0.3, 20...

6.1CVSS6.9AI score0.01908EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/05/14 12:00 a.m.•6 views

PT-2020-13198

Name of the Vulnerable Software and Affected Versions Progress MOVEit Automation Web Admin versions 2018 through 2018.0 prior to 2018.0.3 Progress MOVEit Automation Web Admin versions 2018 SP1 through 2018.2 prior to 2018.2.3 Progress MOVEit Automation Web Admin versions 2018 SP2 through 2018.3...

6.1CVSS0.01908EPSS
SaveExploits0References10
Rows per page
Query Builder