Most recent entries from all

bdu:2023-08276

2026-10-18T03:17:00.111635+00:00

bdu:2023-08276

certfr-2023-avi-1000 — De multiples vulnérabilités ont été découvertes dans Progress MOVEit
In Progress MOVEit Transfer versions released before 2022.0.9 (14.0.9), 2022.1.10 (14.1.10), 2023.0.7 (15.0.7), a reflected cross-site scripting (XSS) vulnerability has been identified when MOVEit Gateway is used in conjunction with MOVEit Transfer.

An attacker could craft a malicious payload targeting the system which comprises a MOVEit Gateway and MOVEit Transfer deployment. If a MOVEit user interacts with the crafted payload, the attacker would be able to execute malicious JavaScript within the context of the victim’s browser.

GHSA-qmwh-wq42-5vwq

2026-10-18T03:17:00.111776+00:00

In Progress MOVEit Transfer versions released before 2022.0.9 (14.0.9), 2022.1.10 (14.1.10), 2023.0.7 (15.0.7), a reflected cross-site scripting (XSS) vulnerability has been identified when MOVEit Gateway is used in conjunction with MOVEit Transfer.

An attacker could craft a malicious payload targeting the system which comprises a MOVEit Gateway and MOVEit Transfer deployment. If a MOVEit user interacts with the crafted payload, the attacker would be able to execute malicious JavaScript within the context of the victim’s browser.

gsd-2023-6217

2026-10-18T03:17:00.111816+00:00

gsd-2023-6217

WID-SEC-W-2023-3029 — Progress Software MOVEit: Mehrere Schwachstellen

2026-10-18T03:17:00.111835+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Progress Software MOVEit ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen oder seine Privilegien zu erweitern.