SQL Injection in Progess Moveit_transfer
CVE-2020-8611
In Progress MOVEit Transfer 2019.1 before 2019.1.4 and 2019.2 before 2019.2.1, multiple SQL Injection vulnerabilities have been found in the REST API that could allow an authenticated attacker to gain unauthorized access to MOVEit Transfer…
Vulnerability class: SQL Injection
EPSS: 0.012 (65.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Progess Moveit_transfer
- Progress Moveit_transfer
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Release Notes, Vendor Advisory)
- cve@mitre.org (x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Release Notes, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM, Product)
Frequently asked questions
- What is CVE-2020-8611?
- CVE-2020-8611 is a high-severity vulnerability in Progess Moveit_transfer, classified under SQL Injection. CVSS score: 8.8/10. Published 2020-02-14.
- How severe is CVE-2020-8611?
- High severity. CVSS v3 base score is 8.8 out of 10.