AUGUST 5, 2026
Live Feed
Back to database
Case File

CVE-2019-18465

CRITICAL · CVSS 9.8 EPSS 1.49%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-10-31 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.8. See the original NVD description below for full technical details.

CVE
CVE-2019-18465
Severity
CRITICAL
CVSS
9.8
EPSS
1.49%

Original NVD Description

In Progress MOVEit Transfer 11.1 before 11.1.3, a vulnerability has been found that could allow an attacker to sign in without full credentials via the SSH (SFTP) interface. The vulnerability affects only certain SSH (SFTP) configurations, and is applicable only if the MySQL database is being used.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2019-18464 CRITICAL CVE-2019-16383 CRITICAL CVE-2019-12146 CRITICAL CVE-2019-12145 HIGH CVE-2019-12144 CRITICAL CVE-2018-6545 MEDIUM