CVE-2021-31827

In Progress MOVEit Transfer before 2021.0 (13.0), a SQL injection vulnerability has been found in the MOVEit Transfer web app that could allow an authenticated…

published May 18, 2021

CVSS
—
EPSS
1%
Percentile
68.3
In the wild
Unconfirmed
What it is

In Progress MOVEit Transfer before 2021.0 (13.0), a SQL injection vulnerability has been found in the MOVEit Transfer web app that could allow an authenticated attacker to gain unauthorized access to MOVEit Transfer's database. Depending on the database engine being used (MySQL, Microsoft SQL Server, or Azure SQL), an attacker may be able to infer information about the structure and contents of the database in addition to executing SQL statements that alter or destroy database elements. This is in MOVEit.DMZ.WebApp in SILHuman.vb.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01213 · 68.3th percentile
Published
2021-05-18T10:25Z
EPSS history
Timeline
  • 18 MAY 10:25Z
    In Progress MOVEit Transfer before 2021.0 (13.0), a SQL injection vulnerability has been found in the MOVEit Transfer web app that could allow an authenticated…
    cvelistv5