CyberSecBulletin

Symphonyfintech vulnerabilities

We track 3 vulnerabilities in Symphonyfintech products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 3, 2024.

3vulnerabilities
0critical
3high
0exploited
8.6average CVSS score

Latest Symphonyfintech vulnerabilities

  • 8.1 High severity

    XTS Web Trader: Incorrect Authorization

    CVE-2024-45588Symphony Fintech

    This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the Preference module of the application. An authenticated remote attacker could exploit this vulnerability by manipulating parameter

  • 8.8 High severity

    XTS Web Trader: Incorrect Authorization

    CVE-2024-45587Symphony Fintech

    This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the Transaction module of vulnerable application. An authenticated remote attacker could exploit this vulnerability by manipulating p

  • 8.8 High severity

    XTS Web Trader: Incorrect Authorization

    CVE-2024-45586Symphony Fintech

    This vulnerability exists due to improper access controls on APIs in the Authentication module of Symphony XTS Web Trading and Mobile Trading platforms (version 2.0.0.1_P160). An authenticated remote attacker could exploit this vulnerability by manipulating pa