CVE-2020-8611

In Progress MOVEit Transfer 2019.1 before 2019.1.4 and 2019.2 before 2019.2.1, multiple SQL Injection vulnerabilities have been found in the REST API that could allow an authenticated attacker to gain unauthorized access to MOVEit Transfer's database via the REST API. Depending on the database engine being used (MySQL, Microsoft SQL Server, or Azure SQL), an attacker may be able to infer information about the structure and contents of the database in addition to executing SQL statements that alter or destroy database elements.

• CWE-89

• https://community.ipswitch.com/s/article/MOVEit-Transfer-Security-Vulnerabilities-Feb-2020Vendor Advisory
• https://docs.ipswitch.com/MOVEit/Transfer2019_1/ReleaseNotes/en/index.htm#49443.htmRelease Notes, Vendor Advisory
• https://docs.ipswitch.com/MOVEit/Transfer2019_2/ReleaseNotes/en/index.htm#49677.htmRelease Notes, Vendor Advisory
• https://status.moveitcloud.com/Product
• https://community.ipswitch.com/s/article/MOVEit-Transfer-Security-Vulnerabilities-Feb-2020Vendor Advisory
• https://docs.ipswitch.com/MOVEit/Transfer2019_1/ReleaseNotes/en/index.htm#49443.htmRelease Notes, Vendor Advisory
• https://docs.ipswitch.com/MOVEit/Transfer2019_2/ReleaseNotes/en/index.htm#49677.htmRelease Notes, Vendor Advisory
• https://status.moveitcloud.com/Product

Published

Feb 14, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-8603A cross-site scripting vulnerability (XSS) in Trend Micro In…6.1
• CVE-2020-8604A vulnerability in Trend Micro InterScan Web Security Virtua…7.5
• CVE-2020-8605A vulnerability in Trend Micro InterScan Web Security Virtua…8.8
• CVE-2020-8606A vulnerability in Trend Micro InterScan Web Security Virtua…9.8
• CVE-2020-8607An input validation vulnerability found in multiple Trend Mi…6.7
• CVE-2020-8608In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses…5.6
• CVE-2020-8612In Progress MOVEit Transfer 2019.1 before 2019.1.4 and 2019.…9
• CVE-2020-8614An issue was discovered on Askey AP4000W TDC_V1.01.003 devic…9.8
• CVE-2020-8615A CSRF vulnerability in the Tutor LMS plugin before 1.5.3 fo…6.5
• CVE-2020-8616A malicious actor who intentionally exploits this lack of ef…8.6
• CVE-2020-8617Using a specially-crafted message, an attacker may potential…5.9
• CVE-2020-8618An attacker who is permitted to send zone data to a server v…4.9