Undergoing Analysis
This vulnerability is currently undergoing analysis and not all information is available. Please check back soon to view the completed vulnerability summary.
An issue was discovered in Progress MOVEit Automation Web Admin. A Web Admin application endpoint failed to adequately sanitize malicious input, which could allow an unauthenticated attacker to execute arbitrary code in a victim’s browser, aka XSS. This affects 2018 – 2018.0 prior to 2018.0.3, 2018 SP1 – 2018.2 prior to 2018.2.3, 2018 SP2 – 2018.3 prior to 2018.3.7, 2019 – 2019.0 prior to 2019.0.3, 2019.1 – 2019.1 prior to 2019.1.2, and 2019.2 – 2019.2 prior to 2019.2.2.