finastra
Security Risk Profile
45
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 5 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 1, 2022 to present
5
Total CVEs
3
Critical+High
0
Exploited
0
Unpatched
Threat Assessment
Avg CVSS
7.2
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
45/100
medium
Severity Distribution
Critical
0High
3Medium
1Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Infoleak
2
2
Path Traversal
1
3
XSS
1
Most Affected Products
1. finastra Secure File Transfer Platform2
2. finastra Nestjs-proxy Node.js2
3. Nestjs-proxy Project Nestjs-proxy Node.js2
4. finastra Ssr-pages Node.js2
5. Pulse Secure VPN1
Recent Vulnerabilities
See more →https://www.bleepingcomputer.com/news/security/fintech-giant-finastra-notifies-victims-of-october-data-breach/
unknown
Fintech giant Finastra notifies victims of October data breach
2/17/2025🔧 No Patch
CVE-2022-31070
CVSS 7.5high
Potential Sensitive Cookie Exposure in NPM Packages @finastra/nestjs-proxy, @ffdc/nestjs-proxy
6/15/2022
CVE-2022-31069
CVSS 7.5high
Potential Authorization Header Exposure in NPM Packages @finastra/nestjs-proxy, @ffdc/nestjs-proxy
6/15/2022
CVE-2022-24718
CVSS 7.6high
Path Traversal in ssr-pages
3/1/2022
CVE-2022-24717
CVSS 6.1medium
Cross Site Scripting (XSS) in ssr-pages
3/1/2022
Monitor finastra in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.