CVE Program partner

FSI

Financial Security Institute (FSI)

API
CVEs, 365 days1117 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationFinancial Security Institute (FSI)
RoleCNA
TypeCERT, Researcher, Bug Bounty Provider
Reports tomitre
ScopeVulnerability assignment related to FSI’s vulnerability coordination role in the South Korea financial sector that are not in another CNA’s scope.
Advisorieshttps://www.fsec.or.kr/bbs/1010

Latest CVEs · RSS

  • CVE-2026-88262 2026-09-15 · CVSS 8.7
    Insufficient session expiration vulnerability in bizwell xClick allows Authentication Bypass. This issue affects xClick: R2, R3, and R3.1.
  • CVE-2026-88261 2026-09-15 · CVSS 5.1
    Improper input validation vulnerability in bizwell xClick allows Stored XSS. This issue affects xClick: R2, R3, and R3.1.
  • CVE-2026-88260 2026-09-11 · CVSS 8.7
    Authentication bypass using an alternate path or channel and Improper validation of syntactic correctness of input vulnerability in Brainzcompany Zenius EMS 8.0
  • CVE-2026-16520 2026-08-20 · CVSS 8.7
    Improper input validation and Exposure of sensitive information through data queries vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, and Geni
  • CVE-2026-9157 2026-05-21 · CVSS 8.6
    Improper input validation, Unrestricted upload of file with dangerous type vulnerability in Gmission Web Fax allows Remote Code Inclusion. This issue affects W
  • CVE-2025-15070 2025-12-29 · CVSS 6.8
    Exposure of Sensitive Information to an Unauthorized Actor, Missing Authorization vulnerability in Gmission Web Fax allows Authentication Abuse. This issue aff
  • CVE-2025-15069 2025-12-29 · CVSS 8.4
    Improper Authentication vulnerability in Gmission Web Fax allows Privilege Escalation.This issue affects Web Fax: from 3.0 before 3.0.1
  • CVE-2025-15068 2025-12-29 · CVSS 8.5
    Missing Authorization vulnerability in Gmission Web Fax allows Authentication Abuse, Session Credential Falsification through Manipulation.This issue affects We
  • CVE-2025-15067 2025-12-29 · CVSS 8.5
    Unrestricted Upload of File with Dangerous Type vulnerability in Innorix Innorix WP allows Upload a Web Shell to a Web Server.This issue affects Innorix WP from
  • CVE-2025-15066 2025-12-29 · CVSS 6.9
    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Missing Authorization vulnerability in Innorix WP allows Path Traversal.This iss
  • CVE-2025-15065 2025-12-29 · CVSS 8.6
    Exposure of Sensitive Information to an Unauthorized Actor, Missing Encryption of Sensitive Data, Files or Directories Accessible to External Parties vulnerabil
  • CVE-2025-11020 2025-10-02 · CVSS 8.7
    An attacker can obtain server information using Path Traversal vulnerability to conduct SQL Injection, which possibly exploits Unrestricted Upload of File with
  • CVE-2025-11221 2025-10-02 · CVSS 9.4
    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Unrestricted Upload of File with Dangerous Type vulnerability in GTONE ChangeFlo
  • CVE-2025-11182 2025-10-02 · CVSS 7.1
    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Download of Code Without Integrity Check vulnerability in GTONE ChangeFlow allow
  • CVE-2025-7672 2025-07-15 · CVSS 2.3
    The improper default setting in JiranSoft CrossEditor4 on Windows, Linux, Unix (API modules) potentaily allows Stored XSS. This issue affects CrossEditor4: from
  • CVE-2025-3621 2025-07-15 · CVSS 9.4
    Vulnerabilities* in ActADUR local server product, developed and maintained by ProTNS, allows Remote Code Inclusion on host systems.  * vulnerabilities: *
  • CVE-2024-11071 2025-04-07 · CVSS 7.7
    Permissive Cross-domain Policy with Untrusted Domains vulnerability in local API server of DestinyECM solution(versions described below) which is developed and

All CVE Program partners