Medium severity5.3NVD Advisory· Published Nov 19, 2025· Updated Jun 17, 2026
CVE-2025-13147
CVE-2025-13147
Description
Server-Side Request Forgery (SSRF) vulnerability in Progress MOVEit Transfer.This issue affects MOVEit Transfer: before 2024.1.8, from 2025.0.0 before 2025.0.4.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:progress:moveit_transfer:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:progress:moveit_transfer:*:*:*:*:*:*:*:*range: <2024.1.8
- (no CPE)range: <2024.1.8, 2025.0.0 - 2025.0.4
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
3- docs.progress.com/bundle/moveit-transfer-release-notes-2024/page/Fixed-Issues-in-2024.1.8.htmlnvdRelease Notes
- docs.progress.com/bundle/moveit-transfer-release-notes-2025/page/Fixed-Issues-in-2025.0.4.htmlnvdRelease Notes
- docs.progress.com/bundle/moveit-transfer-release-notes-2025_1/page/Fixed-Issues-in-2025.1.htmlnvdRelease Notes
News mentions
0No linked articles in our index yet.