Read the docs

Symphony Fintech

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Symphony Fintech records in CISA KEV

No Symphony Fintech vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Xts Mobile Trader 3 records MEDIUM Xts Web Trader 3 records MEDIUM

Records

3 records in Xts Mobile Trader · all components

TI-2024-30607 CVE-2024-45586 · GHSA-hvhq-mcxw-w38r

Account Take Over Vulnerability

Priority MEDIUM 42

This vulnerability exists due to improper access controls on APIs in the Authentication module of Symphony XTS Web Trading and Mobile Trading platforms (version 2.0.0.1_P160).

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00432 Published 2024-09-03 No fix listed CWE-863
TI-2024-30609 CVE-2024-45588 · GHSA-mcwc-jfpx-gq94

Information disclosure in Symphony Fintech XTS Web Trader

Priority MEDIUM 41

This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the Preference module of the application.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00363 Published 2024-09-03 No fix listed CWE-863
TI-2024-30608 CVE-2024-45587 · GHSA-6f6m-whqx-gc66

Unauthorized Modification Vulnerability

Priority MEDIUM 41

This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the Transaction module of vulnerable application.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00417 Published 2024-09-03 No fix listed CWE-863
Open these records in search →