CVE-2025-58130
CRITICALApache Fineract < 1.12.1 - Insufficiently Protected Credentials
Title source: ruleDescription
Insufficiently Protected Credentials vulnerability in Apache Fineract. This issue affects Apache Fineract: through 1.11.0. The issue is fixed in version 1.12.1. Users are encouraged to upgrade to version 1.13.0, the latest release.
Scores
CVSS v3
9.1
EPSS
0.0008
EPSS Percentile
23.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Classification
CWE
CWE-522
Status
published
Affected Products (1)
apache/fineract
< 1.12.1
Timeline
Published
Dec 12, 2025
Tracked Since
Feb 18, 2026