Ransomwarecritical

Progress fixed a third flaw in MOVEit Transfer software

Security Affairsby @securityaffairsJun 16, 2023 · 10:55 UTC (Jun 16, 2023)2 min read4 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-35036 CVE-2023-34362

Tags: cve-2023-35036 cve-2023-34362 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-34362	Unauthenticated SQL Injection in Progress MOVEit Transfer	9.8	100%	KEVRansomwarePoC	Jun 2, 2023 KEV Jun 2, 2023
CVE-2023-35036	In Progress MOVEit Transfer before 2021.0.7 (13.0.7), 2021.1.5 (13.1.5), 2022.0.5 (14.0.5), 2022.1.6 (14.1.6), and 2023.0.2 (15.0.2), SQL injection…	9.1	13%		Jun 12, 2023

From the original article

2 min read at securityaffairs.com

Progress Software addressed a third vulnerability impacting its MOVEit Transfer application that could lead to privilege escalation and information disclosure.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.