CVE-2025-13147: Progress MOVEit Transfer

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Server-Side Request Forgery (SSRF) vulnerability in Progress MOVEit Transfer.This issue affects MOVEit Transfer: before 2024.1.8, from 2025.0.0 before 2025.0.4.

Affected products

• Progress MOVEit Transfer: before 2024.1.8 (fixed in 2024.1.8); from 2025.0.0, before 2025.0.4 (fixed in 2025.0.4)

Published 2025-11-19. Last modified 2026-06-17.