Skip to content
OpenAdvisories

Vendor

Symphony Fintech

3 known vulnerabilities.

Products

XTS Web Trader 3 XTS Mobile Trader 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.1
    CVE-2024-45588

    Information Disclosure Vulnerability

    This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the Preference module of the application. An authenticated remote attacker could exploit this vulnerability by manipulating paramete…

    Symphony Fintech XTS Web Trader
  • Critical 9.1
    CVE-2024-45587

    Unauthorized Modification Vulnerability

    This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the Transaction module of vulnerable application. An authenticated remote attacker could exploit this vulnerability by manipulating …

    Symphony Fintech XTS Web Trader
  • Critical 9.2
    CVE-2024-45586

    Account Take Over Vulnerability

    This vulnerability exists due to improper access controls on APIs in the Authentication module of Symphony XTS Web Trading and Mobile Trading platforms (version 2.0.0.1_P160). An authenticated remote attacker could exploit this vulnerability by manipulating p…

    Symphony Fintech XTS Web Trader XTS Mobile Trader