CVE-2025-11235

High

Unverified Password Change vulnerability in Progress MOVEit Transfer on Windows (REST API modules).This issue affects MOVEit Transfer: from…

ProgressSoftware·CWE-620·Published 2026-01-06

CVSS

7.5

EPSS

0.00

KEV

Exploits

cve.orgen

260 chars

Unverified Password Change vulnerability in Progress MOVEit Transfer on Windows (REST API modules).This issue affects MOVEit Transfer: from 2023.1.0 before 2023.1.3, from 2023.0.0 before 2023.0.8, from 2022.1.0 before 2022.1.11, from 2022.0.0 before 2022.0.10.

NVDen

260 chars

NVDes

292 chars

Vulnerabilidad de cambio de contraseña no verificado en Progress MOVEit Transfer en Windows (módulos de API REST). Este problema afecta a MOVEit Transfer: desde 2023.1.0 antes de 2023.1.3, desde 2023.0.0 antes de 2023.0.8, desde 2022.1.0 antes de 2022.1.11, desde 2022.0.0 antes de 2022.0.10.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
3.1	Primary	cve.org	3.7	—	—	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
3.1	Secondary	NVD	3.7	2.2	1.4	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L