Lucene search
+L

11 matches found

Cvelist
Cvelist
•added 2026/05/20 2:06 p.m.•54 views

CVE-2026-8485 Uncontrolled Memory Allocation vulnerability in Progress Software MOVEit Automation

Uncontrolled Memory Allocation vulnerability in Progress Software MOVEit Automation allows Excessive Allocation. This issue affects MOVEit Automation: before 2025.0.11, from 2025.1.0 before 2025.1.7...

5.9CVSS0.00435EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/04/30 3:07 p.m.•8 views

CVE-2026-5174 Improper Access Control Vulnerability in Progress MOVEit Automation

Improper input validation vulnerability in Progress Software MOVEit Automation allows Privilege Escalation. This issue affects MOVEit Automation: from 2025.1.0 before 2025.1.5, from 2025.0.0 before 2025.0.9, from 2024.0.0 before 2024.1.8, versions prior to 2024.0.0...

7.7CVSS5.2AI score0.00495EPSS
SaveExploits0References1
CVE
CVE
•added 2026/04/30 3:06 p.m.•53 views

CVE-2026-4670

MOVEit Automation (Progress Software) is affected by two CVEs. CVE-2026-4670 is an authentication bypass due to a primary weakness impacting MOVEit Automation releases older than 2025.0.9, 2024.1.x, and 2024.0.x series; CVSSv3.1 is 9.8 (Network, required none, user interaction none, confidentiali...

9.8CVSS5.2AI score0.00611EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
•added 2024/05/30 12:00 a.m.•42 views

Ipswitch MOVEit DMZ < 2024.0.0 (16_0_0)

The version of Ipswitch MOVEit DMZ installed on the remote host is prior to 2024.0.0. It is, therefore, affected by a vulnerability as referenced in the 000258478 advisory. - The Progress MOVEit Automation configuration export function prior to 2024.0.0 uses a cryptographic method with insufficie...

7.5CVSS7AI score0.00235EPSS
SaveExploits0References2
NVD
NVD
•added 2024/05/22 5:16 p.m.•31 views

CVE-2024-4563

The Progress MOVEit Automation configuration export function prior to 2024.0.0 uses a cryptographic method with insufficient bit length...

7.5CVSS6.2AI score0.00235EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/05/22 5:01 p.m.•38 views

CVE-2024-4563 The Progress MOVEit Automation Configuration Export Function Uses a Cryptographic Method with Insufficient Bit Length

The Progress MOVEit Automation configuration export function prior to 2024.0.0 uses a cryptographic method with insufficient bit length...

6.1CVSS6.2AI score0.00235EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/05/22 5:01 p.m.•32 views

CVE-2024-4563 The Progress MOVEit Automation Configuration Export Function Uses a Cryptographic Method with Insufficient Bit Length

The Progress MOVEit Automation configuration export function prior to 2024.0.0 uses a cryptographic method with insufficient bit length...

6.1CVSS6.8AI score0.00235EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/05/22 12:00 a.m.•15 views

Progress Software Progress MOVEit Automation 安全漏洞

Progress Software Progress MOVEit Automation is a suite of hosted file transfer software from Progress Software, USA. The software supports features such as sensitive data transfer and workflow automation. A security vulnerability exists in Progress Software Progress MOVEit Automation that stems...

7.5CVSS6.6AI score0.00235EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/22 12:00 a.m.•1 views

CVE-2024-4563: Use of a Broken or Risky Cryptographic Algorithm

The Progress MOVEit Automation configuration export function prior to 2024.0.0 uses a cryptographic method with insufficient bit length...

7.5CVSS5.8AI score0.00235EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/05/14 5:34 p.m.•46 views

CVE-2020-12677

An issue was discovered in Progress MOVEit Automation Web Admin. A Web Admin application endpoint failed to adequately sanitize malicious input, which could allow an unauthenticated attacker to execute arbitrary code in a victim's browser, aka XSS. This affects 2018 - 2018.0 prior to 2018.0.3, 20...

6.7AI score0.01908EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/14 12:00 a.m.•5 views

CVE-2020-12677: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Progress MOVEit Automation Web Admin. A Web Admin application endpoint failed to adequately sanitize malicious input, which could allow an unauthenticated attacker to execute arbitrary code in a victim's browser, aka XSS. This affects 2018 - 2018.0 prior to 2018.0.3, 20...

6.1CVSS6.9AI score0.01908EPSS
SaveExploits0References2
Rows per page
Query Builder