Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Apache Fineract — cwiki.apache.org/confluence/display/FINERACT/Apache+Finerac… Clear all filters
TI-2024-15577 CVE-2024-23537 · GHSA-xcvp-xvv5-6298

Improper privilege management in Apache Fineract

Priority MEDIUM 42

Improper Privilege Management vulnerability in Apache Fineract.This issue affects Apache Fineract: <1.8.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01104 Published 2024-03-29 Fixed in 1.9.0 CWE-269
TI-2024-15578 CVE-2024-23538 · GHSA-x73g-5x4f-9mqr

SQL injection in Apache Fineract

Priority MEDIUM 45

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Fineract.This issue affects Apache Fineract: <1.8.5.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01291 Published 2024-03-29 Fixed in 1.8.5 CWE-89
TI-2024-15579 CVE-2024-23539 · GHSA-p2vw-f9rr-2m2r

SQL injection in Apache Fineract

Priority MEDIUM 45

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Fineract.This issue affects Apache Fineract: <1.8.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01494 Published 2024-03-29 No fix listed CWE-89