| CVE-2026-64618 |
Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") vulnerability exists in Apache…
|
Not rated
|
Oct 30, 2026 |
| CVE-2026-65874 |
This issue affects Apache Fineract versions up to and including 1.15.0
|
Not rated
|
Oct 30, 2026 |
| CVE-2026-57821 |
A SQL Injection vulnerability exists in Apache Fineract's Office Search API (GET /api/v1/offices) in versions up to…
|
Not rated
|
Jul 15, 2026 |
| CVE-2026-35152 |
A SQL Injection vulnerability exists in Apache Fineract's Report Execution API (runreports endpoint) in versions up to…
|
Not rated
|
Jul 15, 2026 |
| CVE-2026-56287 |
A boolean-based SQL Injection vulnerability exists in Apache Fineract's Client Search API (GET /api/v1/clients) in…
|
Not rated
|
Jul 15, 2026 |
| CVE-2025-58137 |
Authorization Bypass Through User-Controlled Key vulnerability in Apache Fineract
|
Not rated
|
Dec 12, 2025 |
| CVE-2025-58130 |
Insufficiently Protected Credentials vulnerability in Apache Fineract
|
Not rated
|
Dec 12, 2025 |
| CVE-2025-23408 |
Weak Password Requirements vulnerability in Apache Fineract
|
8.5
High
|
Dec 12, 2025 |
| CVE-2024-32838 |
SQL Injection vulnerability in various API endpoints - offices, dashboards, etc
|
9.4
Critical
|
Feb 12, 2025 |
| CVE-2024-23537 |
Improper Privilege Management vulnerability in Apache Fineract.This issue affects Apache Fineract: <1.8.5
|
8.4
High
|
Mar 29, 2024 |
| CVE-2024-23538 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache…
|
9.9
Critical
|
Mar 29, 2024 |
| CVE-2024-23539 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache…
|
8.3
High
|
Mar 29, 2024 |
| CVE-2023-25197 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Software…
|
Not rated
|
Mar 28, 2023 |
| CVE-2023-25196 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Software…
|
Not rated
|
Mar 28, 2023 |
| CVE-2023-25195 |
Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache Fineract
|
Not rated
|
Mar 28, 2023 |
| CVE-2022-44635 |
Apache Fineract allowed an authenticated user to perform remote code execution due to a path traversal vulnerability…
|
Not rated
|
Nov 29, 2022 |
| CVE-2020-17514 |
Apache Fineract prior to 1.5.0 disables HTTPS hostname verification in ProcessorHelper in the configureClient method
|
Not rated
|
May 27, 2021 |
| CVE-2018-1292 |
Within the 'getReportType' method in Apache Fineract 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating, a…
|
Not rated
|
Apr 20, 2018 |
| CVE-2018-1291 |
Apache Fineract 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating exposes different REST end points to query…
|
Not rated
|
Apr 20, 2018 |
| CVE-2018-1290 |
In Apache Fineract versions 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating, Using a single quotation escape…
|
Not rated
|
Apr 20, 2018 |
| CVE-2018-1289 |
In Apache Fineract versions 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating, the system exposes different…
|
Not rated
|
Apr 20, 2018 |
| CVE-2017-5663 |
In Apache Fineract 0.4.0-incubating, 0.5.0-incubating, and 0.6.0-incubating, an authenticated user with…
|
Not rated
|
Dec 14, 2017 |