Vulnerability Details CVE-2025-23408
Weak Password Requirements vulnerability in Apache Fineract.
This issue affects Apache Fineract: through 1.10.1. The issue is fixed in version 1.11.0.
Users are encouraged to upgrade to version 1.13.0, the latest release.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 13.3%
CVSS Severity
CVSS v3 Score 6.5
Products affected by CVE-2025-23408
-
cpe:2.3:a:apache:fineract:-
-
cpe:2.3:a:apache:fineract:0.1.2
-
cpe:2.3:a:apache:fineract:0.3.1
-
cpe:2.3:a:apache:fineract:0.3.2
-
cpe:2.3:a:apache:fineract:0.4.0
-
cpe:2.3:a:apache:fineract:0.4.0-incubating
-
cpe:2.3:a:apache:fineract:0.5.0
-
cpe:2.3:a:apache:fineract:0.5.0-incubating
-
cpe:2.3:a:apache:fineract:0.6.0
-
cpe:2.3:a:apache:fineract:0.6.0-incubating
-
cpe:2.3:a:apache:fineract:1.0.0
-
cpe:2.3:a:apache:fineract:1.1.0
-
cpe:2.3:a:apache:fineract:1.10.1
-
cpe:2.3:a:apache:fineract:1.2.0
-
cpe:2.3:a:apache:fineract:1.3.0
-
cpe:2.3:a:apache:fineract:1.4.0
-
cpe:2.3:a:apache:fineract:1.5.0
-
cpe:2.3:a:apache:fineract:1.6.0
-
cpe:2.3:a:apache:fineract:1.7.0
-
cpe:2.3:a:apache:fineract:1.7.1
-
cpe:2.3:a:apache:fineract:1.7.2
-
cpe:2.3:a:apache:fineract:1.7.3
-
cpe:2.3:a:apache:fineract:1.8.0
-
cpe:2.3:a:apache:fineract:1.8.1
-
cpe:2.3:a:apache:fineract:1.8.2
-
cpe:2.3:a:apache:fineract:1.8.3
-
cpe:2.3:a:apache:fineract:1.8.4
-
cpe:2.3:a:apache:fineract:1.9.0