CVE-2017-6195
Published May 18, 2017Ipswitch MOVEit Transfer (formerly DMZ) allows pre-authentication blind SQL injection. The fixed versions are MOVEit Transfer 2017 9.0.0.201, MOVEit DMZ 8.3.0.30, and MOVEit DMZ 8…
Vendor/product archive
ipswitch / moveit_dmz CVEs
Beta · best-effort5 CVEs tagged to ipswitch / moveit_dmz — 1 Critical, 0 High, 4 Medium, 0 Low, 0 Unrated.
CVE-2015-7676
Published Apr 15, 2016Ipswitch MOVEit File Transfer (formerly DMZ) 8.1 and earlier, when configured to support file view on download, allows remote authenticated users to conduct cross-site scripting (…
CVE-2015-7680
Published Feb 10, 2016Ipswitch MOVEit DMZ before 8.2 provides different error messages for authentication attempts depending on whether the user account exists, which allows remote attackers to enumera…
CVE-2015-7677
Published Feb 10, 2016The MOVEitISAPI service in Ipswitch MOVEit DMZ before 8.2 provides different error messages depending on whether a FileID exists, which allows remote authenticated users to enumer…
CVE-2015-7675
Published Feb 10, 2016The "Send as attachment" feature in Ipswitch MOVEit DMZ before 8.2 and MOVEit Mobile before 1.2.2 allow remote authenticated users to bypass authorization and read uploaded files…
Showing 1-5 of 5 CVEsPage 1 of 1