Approved changes feed: RSS · Atom

cpe:2.3:a:progess:moveit_transfer:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorProgess (2254890f-d5c5-5ab4-ae36-2ca86b28db2d)
ProductMoveit Transfer (59844ed4-722a-54cc-9afe-91ee14bb399d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/ddxkalin/MOVEit-Transfer purl2cpe 2026-06-01 10:12:04.504690

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-8612 vulnerable 2026-06-08 05:27:17.040692 Details available
In Progress MOVEit Transfer 2019.1 before 2019.1.4 and 2019.2 before 2019.2.1, a REST API endpoint failed to adequately sanitize malicious input, which could allow an authenticated attacker to execute arbitrary code in a victim's browser, aka XSS.
Published: 2020-02-14T18:02:08.000Z
Updated: 2024-08-04T10:03:46.294Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8611 vulnerable 2026-06-08 05:27:17.039589 Details available
In Progress MOVEit Transfer 2019.1 before 2019.1.4 and 2019.2 before 2019.2.1, multiple SQL Injection vulnerabilities have been found in the REST API that could allow an authenticated attacker to gain unauthorized access to MOVEit Transfer's database via the REST API. Depending on the database engine being used (MySQL, Microsoft SQL Server, or Azure SQL), an attacker may be able to infer information about the structure and contents of the database in addition to executing SQL statements that alter or destroy database elements.
Published: 2020-02-14T17:59:01.000Z
Updated: 2024-08-04T10:03:46.269Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.