Vulnerability Details CVE-2025-23408
Weak Password Requirements vulnerability in Apache Fineract.
This issue affects Apache Fineract: through 1.10.1. The issue is fixed in version 1.11.0.
Users are encouraged to upgrade to version 1.13.0, the latest release.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 36.9%
CVSS Severity
CVSS v3 Score 6.5
Products affected by CVE-2025-23408
-
cpe:2.3:a:apache:fineract:-
-
cpe:2.3:a:apache:fineract:0.1.2
-
cpe:2.3:a:apache:fineract:0.3.1
-
cpe:2.3:a:apache:fineract:0.3.2
-
cpe:2.3:a:apache:fineract:0.4.0
-
cpe:2.3:a:apache:fineract:0.4.0-incubating
-
cpe:2.3:a:apache:fineract:0.5.0
-
cpe:2.3:a:apache:fineract:0.5.0-incubating
-
cpe:2.3:a:apache:fineract:0.6.0
-
cpe:2.3:a:apache:fineract:0.6.0-incubating
-
cpe:2.3:a:apache:fineract:1.0.0
-
cpe:2.3:a:apache:fineract:1.1.0
-
cpe:2.3:a:apache:fineract:1.10.1
-
cpe:2.3:a:apache:fineract:1.2.0
-
cpe:2.3:a:apache:fineract:1.3.0
-
cpe:2.3:a:apache:fineract:1.4.0
-
cpe:2.3:a:apache:fineract:1.5.0
-
cpe:2.3:a:apache:fineract:1.6.0
-
cpe:2.3:a:apache:fineract:1.7.0
-
cpe:2.3:a:apache:fineract:1.7.1
-
cpe:2.3:a:apache:fineract:1.7.2
-
cpe:2.3:a:apache:fineract:1.7.3
-
cpe:2.3:a:apache:fineract:1.8.0
-
cpe:2.3:a:apache:fineract:1.8.1
-
cpe:2.3:a:apache:fineract:1.8.2
-
cpe:2.3:a:apache:fineract:1.8.3
-
cpe:2.3:a:apache:fineract:1.8.4
-
cpe:2.3:a:apache:fineract:1.9.0