CVE-2015-7675: Ipswitch MOVEit Dmz

Medium severity, CVSS 6.5. EPSS: 3.1% chance of exploitation in the next 30 days.

The "Send as attachment" feature in Ipswitch MOVEit DMZ before 8.2 and MOVEit Mobile before 1.2.2 allow remote authenticated users to bypass authorization and read uploaded files via a valid FileID in the (1) serverFileIds parameter to mobile/sendMsg or (2) arg01 parameter to human.aspx.

Affected products

• Ipswitch MOVEit Dmz: up to and including 8.1
• Ipswitch MOVEit Mobile: up to and including 1.2.0.962

Published 2016-02-10. Last modified 2026-06-17.