Login Request a demo
FI
Product
Fineract
by Apache · last CVE Jul 15, 2026
23
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities23In the news0Timeline
Severity mix
Critical 6High 14Medium 3Low 0
Severity
All severities23Critical6High14Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Fineract to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-23539
9.8
1%
Mar 29
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Fineract.This issue affects Apache Fineract: <1.8.5
Affected: before 1.9.0
CVE-2024-23538
9.8
1%
Mar 29
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Fineract.This issue affects Apache Fineract: <1.8.5
Affected: before 1.9.0
CVE-2018-11801
9.8
5%
Jun 11
SQL injection vulnerability in Apache Fineract before 1.3.0 allows attackers to execute arbitrary SQL commands via a query on a m_center data related table
Affected: before 1.3.0
CVE-2018-11800
9.8
5%
Jun 11
SQL injection vulnerability in Apache Fineract before 1.3.0 allows attackers to execute arbitrary SQL commands via a query on the GroupSummaryCounts related table
Affected: before 1.3.0
CVE-2018-1290
9.8
3%
Apr 20
In Apache Fineract versions 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating, Using a single quotation escape with two continuous SQL parameters can cause a SQL…
Affected: 0.4.0; 0.5.0; 0.6.0; 1.0.0
CVE-2025-58130
9.1
0%
Dec 12
Insufficiently Protected Credentials vulnerability in Apache Fineract
Affected: before 1.12.1
Showing 6