Known Exploited Vulnerabilities June 02, 2023 · CISA KEV Catalog

CVE-2023-34362: Progress MOVEit Transfer SQL Injection Vulnerability

Progress MOVEit Transfer contains a SQL injection vulnerability that could allow an unauthenticated attacker to gain unauthorized access to MOVEit Transfer's database. Depending on the database engine being used (MySQL, Microsoft SQL Server, or Azure SQL), an attacker may be able to infer information about the structure and contents of the database in addition to executing SQL statements that alter or delete database elements.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2023-34362 Progress
Related: CVE-2026-8037: Progress Load Master Command Injection Vulnerability Known Exploited Vulnerabilities · Aug 07, 2026
CVE-2024-4885: Progress Whats Up Gold Path Traversal Vulnerability Known Exploited Vulnerabilities · Mar 03, 2025
CVE-2024-1212: Progress Kemp Load Master OS Command Injection Vulnerability Known Exploited Vulnerabilities · Nov 18, 2024