What is CVE-2021-38159?

CVE-2021-38159 is a critical-severity vulnerability in Progress Moveit_transfer, classified under SQL Injection. CVSS score: 9.8/10. Published 2021-08-07.

How severe is CVE-2021-38159?

Critical severity. CVSS v3 base score is 9.8 out of 10.

SQL Injection in Progress Moveit_transfer

CVE-2021-38159

In certain Progress MOVEit Transfer versions before 2021.0.4 (aka 13.0.4), SQL injection in the MOVEit Transfer web application could allow an unauthenticated remote attacker to gain access to the database. Depending on the database engine…

Vulnerability class: SQL Injection

EPSS: 0.019 (77.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Progress Moveit_transfer
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cve@mitre.org (Product, x_refsource_MISC, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2021-38159?: CVE-2021-38159 is a critical-severity vulnerability in Progress Moveit_transfer, classified under SQL Injection. CVSS score: 9.8/10. Published 2021-08-07.
How severe is CVE-2021-38159?: Critical severity. CVSS v3 base score is 9.8 out of 10.