agentprime: apache-software-foundation-apache-fineractEvery new CVE for apache-software-foundation-apache-fineract.https://agentprime.io/CVE-2026-64618: Apache Fineract: SQL injection vulnerability in Search APIhttps://agentprime.io/advisories/CVE-2026-64618/https://agentprime.io/advisories/CVE-2026-64618/Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 08:29:02 GMTCVECVE-2026-65874: Apache Fineract: SQL injection via ORDER BY parameters in the Center and datatables endpointshttps://agentprime.io/advisories/CVE-2026-65874/https://agentprime.io/advisories/CVE-2026-65874/Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 08:18:08 GMTCVECVE-2026-57821: Apache Fineract: Office list: SQL Injection via Subquery in orderByhttps://agentprime.io/advisories/CVE-2026-57821/https://agentprime.io/advisories/CVE-2026-57821/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 09:20:09 GMTCVECVE-2026-35152: Apache Fineract: SQL injection in runreports endpointhttps://agentprime.io/advisories/CVE-2026-35152/https://agentprime.io/advisories/CVE-2026-35152/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 09:19:54 GMTCVECVE-2026-56287: Apache Fineract: Boolean SQL Injection in Client Search API (orderBy parameter) leading to Local File Disclosurehttps://agentprime.io/advisories/CVE-2026-56287/https://agentprime.io/advisories/CVE-2026-56287/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 09:19:38 GMTCVECVE-2025-58137: Apache Fineract: IDOR via self-service APIhttps://agentprime.io/advisories/CVE-2025-58137/https://agentprime.io/advisories/CVE-2025-58137/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Dec 2025 09:21:00 GMTCVECVE-2025-58130: Apache Fineract: Server Key not maskedhttps://agentprime.io/advisories/CVE-2025-58130/https://agentprime.io/advisories/CVE-2025-58130/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Dec 2025 09:20:06 GMTCVEcriticalCVE-2025-23408: Apache Fineract: weak password policyhttps://agentprime.io/advisories/CVE-2025-23408/https://agentprime.io/advisories/CVE-2025-23408/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Dec 2025 09:18:59 GMTCVECVE-2024-32838: Apache Fineract: SQL injection vulnerabilities in offices API endpointhttps://agentprime.io/advisories/CVE-2024-32838/https://agentprime.io/advisories/CVE-2024-32838/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Feb 2025 09:44:15 GMTCVEcriticalCVE-2024-23537: Apache Fineract: Under certain circumstances, this vulnerability allowed users, without specific permissions, to escalate their privileges to any role.https://agentprime.io/advisories/CVE-2024-23537/https://agentprime.io/advisories/CVE-2024-23537/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Mar 2024 14:38:05 GMTCVECVE-2024-23538: Apache Fineract: Under certain system configurations, the sqlSearch parameter was vulnerable to SQL injection attacks, potentially allowing attackers to manipulate database queries.https://agentprime.io/advisories/CVE-2024-23538/https://agentprime.io/advisories/CVE-2024-23538/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Mar 2024 14:37:40 GMTCVEcriticalCVE-2024-23539: Apache Fineract: Under certain system configurations, the sqlSearch parameter for specific endpoints was vulnerable to SQL injection attacks, potentially allowing attackers to manipulate database que…https://agentprime.io/advisories/CVE-2024-23539/https://agentprime.io/advisories/CVE-2024-23539/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Mar 2024 14:36:57 GMTCVECVE-2023-25197: apache fineract: SQL injection vulnerability in certain procedure callshttps://agentprime.io/advisories/CVE-2023-25197/https://agentprime.io/advisories/CVE-2023-25197/Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Mar 2023 11:17:19 GMTCVECVE-2023-25196: Apache Fineract: SQL injection vulnerabilityhttps://agentprime.io/advisories/CVE-2023-25196/https://agentprime.io/advisories/CVE-2023-25196/Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Mar 2023 11:16:57 GMTCVECVE-2023-25195: Apache Fineract: SSRF template type vulnerability in certain authenticated usershttps://agentprime.io/advisories/CVE-2023-25195/https://agentprime.io/advisories/CVE-2023-25195/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Mar 2023 11:16:28 GMTCVECVE-2022-44635: Apache Fineract allowed an authenticated user to perform remote code execution due to path traversalhttps://agentprime.io/advisories/CVE-2022-44635/https://agentprime.io/advisories/CVE-2022-44635/CVSS 8.8 (High). Critical: CVSS score 8.8 (7.0 or more) and EPSS 0.69 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Nov 2022 00:00:00 GMTCVEcriticalCVE-2020-17514: disabled hostname verificiationhttps://agentprime.io/advisories/CVE-2020-17514/https://agentprime.io/advisories/CVE-2020-17514/Published by the CVE Program. Not analysed by agentprime yet.Thu, 27 May 2021 12:10:10 GMTCVECVE-2018-1292: Apache Software Foundation Apache Fineract: Within the 'getReportType' method in Apache Fineract 1.0.0, 0.6.0-incubating…https://agentprime.io/advisories/CVE-2018-1292/https://agentprime.io/advisories/CVE-2018-1292/Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Apr 2018 18:00:00 GMTCVECVE-2018-1291: Apache Software Foundation Apache Fineract: Apache Fineract 1.0.0, 0.6.0-incubating, 0.5.0-incubating…https://agentprime.io/advisories/CVE-2018-1291/https://agentprime.io/advisories/CVE-2018-1291/Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Apr 2018 18:00:00 GMTCVECVE-2018-1290: Apache Software Foundation Apache Fineract: In Apache Fineract versions 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating…https://agentprime.io/advisories/CVE-2018-1290/https://agentprime.io/advisories/CVE-2018-1290/Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Apr 2018 18:00:00 GMTCVECVE-2018-1289: Apache Software Foundation Apache Fineract: In Apache Fineract versions 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating…https://agentprime.io/advisories/CVE-2018-1289/https://agentprime.io/advisories/CVE-2018-1289/Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Apr 2018 18:00:00 GMTCVECVE-2017-5663: Apache Software Foundation Apache Fineract: In Apache Fineract 0.4.0-incubating, 0.5.0-incubating, and 0.6.0-incubating…https://agentprime.io/advisories/CVE-2017-5663/https://agentprime.io/advisories/CVE-2017-5663/Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 Dec 2017 15:00:00 GMTCVE