Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Symphony Fintech Clear all filters
TI-2024-30609 CVE-2024-45588 · GHSA-mcwc-jfpx-gq94

Information disclosure in Symphony Fintech XTS Web Trader

Priority MEDIUM 41

This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the Preference module of the application.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00363 Published 2024-09-03 No fix listed CWE-863
TI-2024-30608 CVE-2024-45587 · GHSA-6f6m-whqx-gc66

Unauthorized Modification Vulnerability

Priority MEDIUM 41

This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the Transaction module of vulnerable application.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00417 Published 2024-09-03 No fix listed CWE-863
TI-2024-30607 CVE-2024-45586 · GHSA-hvhq-mcxw-w38r

Account Take Over Vulnerability

Priority MEDIUM 42

This vulnerability exists due to improper access controls on APIs in the Authentication module of Symphony XTS Web Trading and Mobile Trading platforms (version 2.0.0.1_P160).

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00432 Published 2024-09-03 No fix listed CWE-863