1.2.0

DATE	CVE	VULNERABILITY TITLE	RISK
2022-11-29	CVE-2022-44635	Path Traversal vulnerability in Apache Fineract Apache Fineract allowed an authenticated user to perform remote code execution due to a path traversal vulnerability in a file upload component of Apache Fineract, allowing an attacker to run remote code. network low complexity apache CWE-22	8.8
2021-05-27	CVE-2020-17514	Unspecified vulnerability in Apache Fineract Apache Fineract prior to 1.5.0 disables HTTPS hostname verification in ProcessorHelper in the configureClient method. network high complexity apache	7.4
2020-10-13	CVE-2018-20243	Insufficiently Protected Credentials vulnerability in Apache Fineract The implementation of POST with the username and password in the URL parameters exposed the credentials. network low complexity apache CWE-522	5.0
2019-06-11	CVE-2018-11801	SQL Injection vulnerability in Apache Fineract SQL injection vulnerability in Apache Fineract before 1.3.0 allows attackers to execute arbitrary SQL commands via a query on a m_center data related table. network low complexity apache CWE-89 critical	9.8
2019-06-11	CVE-2018-11800	SQL Injection vulnerability in Apache Fineract SQL injection vulnerability in Apache Fineract before 1.3.0 allows attackers to execute arbitrary SQL commands via a query on the GroupSummaryCounts related table. network low complexity apache CWE-89 critical	9.8