CVE-2023-42660
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2023
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
MOVEit Transfer Machine Interface SQL Injection
In Progress MOVEit Transfer versions released before 2021.1.8 (13.1.8), 2022.0.8 (14.0.8), 2022.1.9 (14.1.9), 2023.0.6 (15.0.6), a SQL injection vulnerability has been identified in the MOVEit Transfer machine interface that could allow an authenticated attacker to gain unauthorized access to the MOVEit Transfer database. An attacker could submit a crafted payload to the MOVEit Transfer machine interface which could result in modification and disclosure of MOVEit database content.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
MOVEit Transfer
- Vendor
- Progress Software Corporation
- Product
- MOVEit Transfer
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 2023.0.0 (15.0.0) | affected | semver | 2023.0.6 (15.0.6) | Unavailable | None listed |
| 2022.1.0 (14.1.0) | affected | semver | 2022.1.9 (14.1.9) | Unavailable | None listed |
| 2022.0.0 (14.0.0) | affected | semver | 2022.0.8 (14.0.8) | Unavailable | None listed |
| 2021.1.0 (13.1.0) | affected | semver | 2021.1.8 (13.1.8) | Unavailable | None listed |