Skip to content
OpenAdvisories

Product · Progress

MOVEit Transfer

30 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.5
    CVE-2026-8650

    Authenticated Path Traversal allows MOVEit admins to view arbitrary system files

    Relative path traversal vulnerability in Progress MOVEit Transfer (Admin Settings module). This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3.

    Progress MOVEit Transfer
  • Medium 6.4
    CVE-2026-8649

    Institution scope bypass vulnerability in custom reports

    Improper Neutralization of Special Elements in Data Query Logic vulnerability in Progress MOVEit Transfer (Custom Reports modules). This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3.

    Progress MOVEit Transfer
  • Medium 5.3
    CVE-2025-13147

    External Service Interaction (DNS)

    Server-Side Request Forgery (SSRF) vulnerability in Progress MOVEit Transfer.This issue affects MOVEit Transfer: before 2024.1.8, from 2025.0.0 before 2025.0.4.

    Progress MOVEit Transfer
  • Medium 5.9
    CVE-2025-2324

    A MOVEit Transfer user configured as a Shared Account can gain unintended List permissions on a folder

    Improper Privilege Management vulnerability for users configured as Shared Accounts in Progress MOVEit Transfer (SFTP module) allows Privilege Escalation.This issue affects MOVEit Transfer: from 2023.1.0 before 2023.1.12, from 2024.0.0 before 2024.0.8, from 2…

    Progress MOVEit Transfer