CVE-2023-34362

CVSS

—

EPSS

0.999 (100.0th percentile)

CISA KEV

Added 2023-06-02, due 2023-06-23

Exploitation

No report

Public exploits

15 repositories

State

Unknown

Coverage

• 

  ● Actively exploitedCritical 100Huntress◆Authoritative. Authoritative publisher: a primary source, or a newsroom with formal editorial standards01 Jun 2023, 00:00

  MOVEit Transfer Critical Vulnerability CVE-2023-34362 | Huntress

  Our team is tracking in-the-wild exploitation of a zero-day vulnerability against Progress' MOVEit Transfer web application that allows for escalated privileges and unauthorized access.

  ↗huntress.com/blog/moveit-transfer-critical-vuln…(opens the publisher's site in a new tab)

What we observed

1. 24 Sept, 12:35poc publishedpoc-in-github
2. 24 Sept, 11:50kev addedcisa-kev