Lucene search
+L

6 matches found

NVD
NVD
•added 2026/07/15 10:16 a.m.•44 views

CVE-2026-35152

A SQL Injection vulnerability exists in Apache Fineract's Report Execution API runreports endpoint in versions up to and including 1.14.0. Report parameter values are incorporated into the generated SQL query without sufficient validation, allowing an authenticated user with permission to run...

8.8CVSS0.03281EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/07/15 9:19 a.m.•25 views

CVE-2026-35152 Apache Fineract: SQL injection in runreports endpoint

A SQL Injection vulnerability exists in Apache Fineract's Report Execution API runreports endpoint in versions up to and including 1.14.0. Report parameter values are incorporated into the generated SQL query without sufficient validation, allowing an authenticated user with permission to run...

5.7AI score0.03281EPSS
SaveExploits0References3
CVE
CVE
•added 2026/07/15 9:19 a.m.•53 views

CVE-2026-35152

A SQL Injection vulnerability exists in Apache Fineract versions up to and including 1.14.0 within the Report Execution API (specifically the runreports endpoint). The root cause is the incorporation of report parameter values into generated SQL queries without sufficient validation. This allows ...

8.8CVSS5.7AI score0.03281EPSS
SaveExploits0References4Affected Software1
attackerkb
attackerkb
•added 2026/07/15 9:19 a.m.•21 views

CVE-2026-35152

A SQL Injection vulnerability exists in Apache Fineract's Report Execution API runreports endpoint in versions up to and including 1.14.0. Report parameter values are incorporated into the generated SQL query without sufficient validation, allowing an authenticated user with permission to run...

5.7AI score0.03281EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2026/07/15 9:19 a.m.•27 views

CVE-2026-35152 Apache Fineract: SQL injection in runreports endpoint

A SQL Injection vulnerability exists in Apache Fineract's Report Execution API runreports endpoint in versions up to and including 1.14.0. Report parameter values are incorporated into the generated SQL query without sufficient validation, allowing an authenticated user with permission to run...

8.8CVSS5.8AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2026/07/15 9:19 a.m.•59 views

CVE-2026-35152 Apache Fineract: SQL injection in runreports endpoint

A SQL Injection vulnerability exists in Apache Fineract's Report Execution API runreports endpoint in versions up to and including 1.14.0. Report parameter values are incorporated into the generated SQL query without sufficient validation, allowing an authenticated user with permission to run...

0.03281EPSS
SaveExploits0References3
Rows per page
Query Builder