CVE-2025-11235

7.5 highEPSS 0.2%

High (7.5) in progress moveit transfer. EPSS 0.2% chance of exploitation in the next 30 days.

Unverified Password Change vulnerability in Progress MOVEit Transfer on Windows (REST API modules).This issue affects MOVEit Transfer: from 2023.1.0 before 2023.1.3, from 2023.0.0 before 2023.0.8, from 2022.1.0 before 2022.1.11, from 2022.0.0 before 2022.0.10.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 11% of CVEs (scores of 2026-10-31)
CWE: CWE-620
Published: 2026-01-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

progress:moveit_transfer

References

https://docs.progress.com/bundle/moveit-transfer-release-notes-2023_1/page/Fixed-Issues-in-2023.1.3.html

Check your stack JSON