CVE-2023-34362Vulnerability

Progress MOVEit Transfer SQL Injection Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on 2 Jun 2023.

Reported by 5 independent sources · first reported 1 Jun 2023 by Huntress · last reported 3 Sep 2026

Last reported 1 month ago

CISA KEVAdded 2 Jun 2023
Fix due 23 Jun 2023
Used by ransomware: knownCISA KEV catalogue

EPSS99.9%
higher than 99% of CVEsFIRST EPSS, as of 6 Oct 2026

What the reports say

7 reports, newest first · the exact sentence from each

“…nfrastructure Security Agency and FBI documented in advisory AA23-158A how the Cl0p ransomware group exploited a SQL injection flaw (CVE-2023-34362) in Progress Software's MOVEit Transfer platform, a widely used managed file transfer tool.”

CybleVendor3 Sep 2026
Supply Chain Attacks in 2026: Why Threat Intelligence Is the Only Early Warning System That Works
“Take CVE-2023-34362 as an example.”

Fortinet Threat ResearchVendor13 Aug 2026
Multi-Functional Linux Botnet “Evooo1Bot”
“The cl0p ransomware gang exploited a zero-day SQL injection vulnerability (CVE-2023-34362) in Progress Software’s MOVEit managed file transfer (MFT) software, a tool for exchanging sensitive data.”

HuntressVendor25 Aug 2025
Ten Years of Resilience, Innovation & Community-Driven Defense
“CVE-2023-34362”

GreyNoiseVendor25 Jun 2025
Surge in MOVEit Transfer Scanning Could Signal Emerging Threat Activity
“(2023) MOVEit Transfer CVE-2023-34362 Deep Dive and Indicators of Compromise., Autonomous Pentesting Platform Available at: MOVEit Transfer CVE-2023-34362 Deep Dive and Indicators of Compromise (Accessed: 24 January 2024).”

NCSC UKGovernment28 Jan 2025
A method to assess 'forgivable' vs 'unforgivable' vulnerabilities
“…cumented by Huntress, MOVEit customers found themselves the victim of an actively exploited zero-day vulnerability, since tracked as CVE-2023-34362.”

HuntressVendor7 Jul 2023
Move It on Over: Reflecting on the MOVEit Exploitation
“MOVEit Transfer Critical Vulnerability CVE-2023-34362”

HuntressVendor1 Jun 2023
MOVEit Transfer Critical Vulnerability CVE-2023-34362

Indicators reported together

named in the same reports

iglu[.]netin 1 report
hxxps://news.blackduck[.]com/2015-07-29-Coverity-Scan-Open-Source-Report-Shows-Commercial-Code-Is-More-Compliant-to-Security-Standards-than-Open-Source-Codein 1 report
news.blackduck[.]comin 1 report
hxxps://www.acsac[.]org/2007/workshop/Howard.pdfin 1 report
www.acsac[.]orgin 1 report
hxxps://www.outsystems[.]com/blog/posts/attack-surface/in 1 report
www.outsystems[.]comin 1 report

Copy these 7 indicators · defanged

7 indicators, defanged, one per line

iglu[.]net
hxxps://news.blackduck[.]com/2015-07-29-Coverity-Scan-Open-Source-Report-Shows-Commercial-Code-Is-More-Compliant-to-Security-Standards-than-Open-Source-Code
news.blackduck[.]com
hxxps://www.acsac[.]org/2007/workshop/Howard.pdf
www.acsac[.]org
hxxps://www.outsystems[.]com/blog/posts/attack-surface/
www.outsystems[.]com

Also named with it: CVE-2023-36934, CVE-2018-14558, CVE-2024-4577, CVE-2021-26855, CVE-2021-36260, CVE-2023-27997, CVE-2021-26084, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065, CVE-2017-5638, CVE-2021-44228, CVE-2024-1709

Thanks — we review every report.

Report a wrong value