| CVE-2026-64618 |
Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") vulnerability exists in Apache…
|
Non notée
|
30 oct. 2026 |
| CVE-2026-65874 |
This issue affects Apache Fineract versions up to and including 1.15.0
|
Non notée
|
30 oct. 2026 |
| CVE-2026-57821 |
A SQL Injection vulnerability exists in Apache Fineract's Office Search API (GET /api/v1/offices) in versions up to…
|
Non notée
|
15 juil. 2026 |
| CVE-2026-35152 |
A SQL Injection vulnerability exists in Apache Fineract's Report Execution API (runreports endpoint) in versions up to…
|
Non notée
|
15 juil. 2026 |
| CVE-2026-56287 |
A boolean-based SQL Injection vulnerability exists in Apache Fineract's Client Search API (GET /api/v1/clients) in…
|
Non notée
|
15 juil. 2026 |
| CVE-2025-58137 |
Authorization Bypass Through User-Controlled Key vulnerability in Apache Fineract
|
Non notée
|
12 déc. 2025 |
| CVE-2025-58130 |
Insufficiently Protected Credentials vulnerability in Apache Fineract
|
Non notée
|
12 déc. 2025 |
| CVE-2025-23408 |
Weak Password Requirements vulnerability in Apache Fineract
|
8.5
Élevée
|
12 déc. 2025 |
| CVE-2024-32838 |
SQL Injection vulnerability in various API endpoints - offices, dashboards, etc
|
9.4
Critique
|
12 févr. 2025 |
| CVE-2024-23537 |
Improper Privilege Management vulnerability in Apache Fineract.This issue affects Apache Fineract: <1.8.5
|
8.4
Élevée
|
29 mars 2024 |
| CVE-2024-23538 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache…
|
9.9
Critique
|
29 mars 2024 |
| CVE-2024-23539 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache…
|
8.3
Élevée
|
29 mars 2024 |
| CVE-2023-25197 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Software…
|
Non notée
|
28 mars 2023 |
| CVE-2023-25196 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Software…
|
Non notée
|
28 mars 2023 |
| CVE-2023-25195 |
Server-Side Request Forgery (SSRF) vulnerability in Apache Software Foundation Apache Fineract
|
Non notée
|
28 mars 2023 |
| CVE-2022-44635 |
Apache Fineract allowed an authenticated user to perform remote code execution due to a path traversal vulnerability…
|
Non notée
|
29 nov. 2022 |
| CVE-2020-17514 |
Apache Fineract prior to 1.5.0 disables HTTPS hostname verification in ProcessorHelper in the configureClient method
|
Non notée
|
27 mai 2021 |
| CVE-2018-1292 |
Within the 'getReportType' method in Apache Fineract 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating, a…
|
Non notée
|
20 avr. 2018 |
| CVE-2018-1291 |
Apache Fineract 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating exposes different REST end points to query…
|
Non notée
|
20 avr. 2018 |
| CVE-2018-1290 |
In Apache Fineract versions 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating, Using a single quotation escape…
|
Non notée
|
20 avr. 2018 |
| CVE-2018-1289 |
In Apache Fineract versions 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating, the system exposes different…
|
Non notée
|
20 avr. 2018 |
| CVE-2017-5663 |
In Apache Fineract 0.4.0-incubating, 0.5.0-incubating, and 0.6.0-incubating, an authenticated user with…
|
Non notée
|
14 déc. 2017 |