xts_web_trader vulnerabilities

3 known vulnerabilities in xts_web_trader from Symphonyfintech. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  XTS Web Trader: Incorrect Authorization

  CVE-2024-45588Sep 3, 2024Symphony Fintech

  This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the Preference module of the application. An authenticated remote attacker could exploit this vulnerability by manipulating parameter

• 8.8 High severity

  XTS Web Trader: Incorrect Authorization

  CVE-2024-45587Sep 3, 2024Symphony Fintech

  This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the Transaction module of vulnerable application. An authenticated remote attacker could exploit this vulnerability by manipulating p

• 8.8 High severity

  XTS Web Trader: Incorrect Authorization

  CVE-2024-45586Sep 3, 2024Symphony Fintech

  This vulnerability exists due to improper access controls on APIs in the Authentication module of Symphony XTS Web Trading and Mobile Trading platforms (version 2.0.0.1_P160). An authenticated remote attacker could exploit this vulnerability by manipulating pa