Outbreak Alert: Progress MOVEit Transfer SQL Injection Vulnerability

FortiRecon provides outside-in coverage for risks toward customers. 

External Attack Surface Management helps customers to identify exposure to known and unknown enterprise assets and associated vulnerabilities across the enterprise. 

The Vulnerability Intelligence Module under Adversary Centric Intelligence (ACI) provides a realistic view of the impact of the vulnerability based upon chatter and discussion of the same across various external sources such as Darkweb, social media, News / Blogs etc.

CVE ID 

CVE-2023-34362

CVE Title 

MOVEit Transfer Critical Vulnerability

CVE Severity 

High

ACI Reporting Coverage 

2 Reports (OSINT, TECHINT) 

Additional References 

• 2 articles referencing possibly working exploit(s) for this vulnerability.
• 10 articles are referencing this CVE on the security blog. 
• 200+ mentions on social media for this vulnerability.
• Discussion on 1 Telegram channel.

EASM Scanner 

No 

CVE ID 

CVE-2023-35036

CVE Title 

MOVEit Transfer SQL injection vulnerability

CVE Severity 

 High

ACI Reporting Coverage 

 --

Additional References 

• 5 articles are referencing this CVE on the security/media blogs.
• 15 mentions on social media for this vulnerability. 

EASM Scanner 

No 

CVE ID 

CVE-2023-35708

CVE Title 

Progress MOVEit Transfer Privilege Escalation

CVE Severity 

 High

ACI Reporting Coverage 

 1 Report (OSINT)

Additional References 

• 5 articles are referencing this CVE on a security blog. 
• 36 mentions on social media for this vulnerability. 

EASM Scanner 

No