Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Fineract

22 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-57821 Public exploit

    Apache Fineract: Office list: SQL Injection via Subquery in orderBy

    A SQL Injection vulnerability exists in Apache Fineract's Office Search API (GET /api/v1/offices) in versions up to and including 1.14.0. The orderBy request parameter is concatenated into a SQL query without sufficient validation, allowing an authenticated u…

    Apache Software Foundation Apache Fineract