MD
Product
Moveit Dmz
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 4Low 0
Watch
Add Moveit Dmz to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-6195 | 9.8 | May 18 | Ipswitch MOVEit Transfer (formerly DMZ) allows pre-authentication blind SQL injection Affected: through 8.1; 8.2; 8.3 |
| CVE-2015-7675 | 6.5 | Feb 10 | The "Send as attachment" feature in Ipswitch MOVEit DMZ before 8.2 and MOVEit Mobile before 1.2.2 allow remote authenticated users to bypass authorization and read uploaded files… Affected: through 8.1 |
| CVE-2015-7676 | 5.4 | Apr 15 | Ipswitch MOVEit File Transfer (formerly DMZ) 8.1 and earlier, when configured to support file view on download, allows remote authenticated users to conduct cross-site scripting… Affected: through 8.1 |
| CVE-2015-7680 | 5.3 | Feb 10 | Ipswitch MOVEit DMZ before 8.2 provides different error messages for authentication attempts depending on whether the user account exists, which allows remote attackers to… Affected: through 8.1 |
| CVE-2015-7677 | 4.3 | Feb 10 | The MOVEitISAPI service in Ipswitch MOVEit DMZ before 8.2 provides different error messages depending on whether a FileID exists, which allows remote authenticated users to… Affected: through 8.1 |
Showing 5