CVE-2017-6195

Critical

Published: 18/05/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Ipswitch MOVEit Transfer (formerly DMZ) allows pre-authentication blind SQL injection. The fixed versions are MOVEit Transfer 2017 9.0.0.201, MOVEit DMZ 8.3.0.30, and MOVEit DMZ 8.2.0.20.

Risk Assessment

Organizations may be exposed to unauthorized access to data and the potential for database manipulation, which can lead to serious legal and financial consequences.

Recommendation

It is recommended to upgrade to the latest versions of MOVEit Transfer or MOVEit DMZ to mitigate this vulnerability.

Original NVD description (English source)

Ipswitch MOVEit Transfer (formerly DMZ) allows pre-authentication blind SQL injection. The fixed versions are MOVEit Transfer 2017 9.0.0.201, MOVEit DMZ 8.3.0.30, and MOVEit DMZ 8.2.0.20.