Skip to content
OpenAdvisories

Vendor

Progress

56 known vulnerabilities.

Products

MOVEit Transfer 30 ShareFile Storage Zones Controller 9 LoadMaster 9 OpenEdge 4 DataDirect Connect for JDBC for Amazon Redshift 2 DataDirect Connect for JDBC for Apache Cassandra 2 DataDirect Connect for JDBC for Hive 2 DataDirect Connect for JDBC for Apache Impala 2 DataDirect Connect for JDBC for Apache SparkSQL 2 DataDirect Connect for JDBC Autonomous REST Connector 2 DataDirect Connect for JDBC for DB2 2 DataDirect Connect for JDBC for Google Analytics 4 2 DataDirect Connect for JDBC for Google BigQuery 2 DataDirect Connect for JDBC for Greenplum 2 DataDirect Connect for JDBC for Informix 2 DataDirect Connect for JDBC for Microsoft Dynamics 365 2 DataDirect Connect for JDBC for Microsoft SQLServer 2 DataDirect Connect for JDBC for Microsoft Sharepoint 2 DataDirect Connect for JDBC for MongoDB 2 DataDirect Connect for JDBC for MySQL 2 DataDirect Connect for JDBC for Oracle Database 2 DataDirect Connect for JDBC for Oracle Eloqua 2 DataDirect Connect for JDBC for Oracle Sales Cloud 2 DataDirect Connect for JDBC for Oracle Service Cloud 2 DataDirect Connect for JDBC for PostgreSQL 2 DataDirect Connect for JDBC for Progress OpenEdge 2 DataDirect Connect for JDBC for Salesforce 2 DataDirect Connect for JDBC for SAP HANA 2 DataDirect Connect for JDBC for SAP S/4 HANA 2 DataDirect Connect for JDBC for Sybase ASE 2 DataDirect Connect for JDBC for Snowflake 2 DataDirect Hybrid Data Pipeline Server 2 DataDirect Hybrid Data Pipeline JDBC Driver 2 DataDirect Hybrid Data Pipeline On Premises Connector 2 DataDirect Hybrid Data Pipeline Docker 2 DataDirect OpenAccess JDBC Driver 2 MOVEit Gateway 1 Sitefinity 1 MOVEit Automation 0 MOVEit 0
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 3.5
    CVE-2026-8801

    File Extension Restriction Bypass in MOVEit Transfer

    Path equivalence: vulnerability in Progress MOVEit Transfer (File Upload modules). This issue affects MOVEit Transfer: before 2025.0.8, from 2025.1.0 before 2025.1.4.

    Progress MOVEit Transfer
  • Low 2.7
    CVE-2026-8800

    Cross-Org External Token Metadata accessible to AuditUser role

    Incorrect Authorization vulnerability in Progress MOVEit Transfer (Audit User module). This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3.

    Progress MOVEit Transfer
  • Low 3.7
    CVE-2026-8651

    IPv6 Loopback Spoof via Trusted Host Header Bypasses Origin Check in MOVEit Transfer

    Limited authentication bypass by spoofing vulnerability in Progress MOVEit Transfer (HTTPS module). This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3.

    Progress MOVEit Transfer
  • Low 3.7
    CVE-2025-11235

    MOVEit Transfer REST API does not require current password in order to initiate the password change process

    Unverified Password Change vulnerability in Progress MOVEit Transfer on Windows (REST API modules).This issue affects MOVEit Transfer: from 2023.1.0 before 2023.1.3, from 2023.0.0 before 2023.0.8, from 2022.1.0 before 2022.1.11, from 2022.0.0 before 2022.0.10.

    Progress MOVEit Transfer