CVE-2025-58130

CRITICAL

Apache Fineract < 1.12.1 - Insufficiently Protected Credentials

Title source: rule
STIX 2.1

Description

Insufficiently Protected Credentials vulnerability in Apache Fineract. This issue affects Apache Fineract: through 1.11.0. The issue is fixed in version 1.12.1. Users are encouraged to upgrade to version 1.13.0, the latest release.

References (2)

Scores

CVSS v3 9.1
EPSS 0.0010
EPSS Percentile 28.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-522
Status published
Products (1)
apache/fineract < 1.12.1
Published Dec 12, 2025
Tracked Since Feb 18, 2026