CVE-2023-34362 Progress MOVEit Transfer
Progress MOVEit Transfer contains a SQL injection vulnerability that could allow an unauthenticated attacker to gain unauthorized access to MOVEit Transfer's database. Depending on the database engine being used (MySQL, Microsoft SQL Server, or Azure SQL), an attacker may be able to infer information about the…
- CVSS
- not scored
On CISA’s exploited list
Progress MOVEit Transfer SQL Injection Vulnerability
- Added
- 2023-06-02
- Federal patch deadline
- 2023-06-23
- Ransomware use
- known