Vulnerabilities > Symphonyfintech

DATE CVE VULNERABILITY TITLE RISK
2024-09-03 CVE-2024-45588 Incorrect Authorization vulnerability in Symphonyfintech XTS Mobile Trader and XTS web Trader
This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the Preference module of the application.
network
low complexity
symphonyfintech CWE-863
8.1
2024-09-03 CVE-2024-45586 Unspecified vulnerability in Symphonyfintech XTS Mobile Trader and XTS web Trader
This vulnerability exists due to improper access controls on APIs in the Authentication module of Symphony XTS Web Trading and Mobile Trading platforms (version 2.0.0.1_P160).
network
low complexity
symphonyfintech
8.8
2024-09-03 CVE-2024-45587 Unspecified vulnerability in Symphonyfintech XTS Mobile Trader and XTS web Trader
This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the Transaction module of vulnerable application.
network
low complexity
symphonyfintech
8.8