<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: symphonyfintech</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-45588: This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access con</title><link>https://patchthecve.com/cve/CVE-2024-45588.html</link><guid>https://patchthecve.com/cve/CVE-2024-45588.html</guid><pubDate>Wed, 17 Jun 2026 07:54:31 +0000</pubDate><description>HIGH 8.1: This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the Preference module of the application. An authenticated remote attacker could exploit this vulnerability by manipulating parameters through HTTP request which could lead </description></item><item><title>CVE-2024-45587: This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access con</title><link>https://patchthecve.com/cve/CVE-2024-45587.html</link><guid>https://patchthecve.com/cve/CVE-2024-45587.html</guid><pubDate>Wed, 17 Jun 2026 07:54:31 +0000</pubDate><description>HIGH 8.8: This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on APIs in the Transaction module of vulnerable application. An authenticated remote attacker could exploit this vulnerability by manipulating parameters through HTTP request which cou</description></item><item><title>CVE-2024-45586: This vulnerability exists due to improper access controls on APIs in the Authentication module of Symphony XTS</title><link>https://patchthecve.com/cve/CVE-2024-45586.html</link><guid>https://patchthecve.com/cve/CVE-2024-45586.html</guid><pubDate>Wed, 17 Jun 2026 07:54:31 +0000</pubDate><description>HIGH 8.8: This vulnerability exists due to improper access controls on APIs in the Authentication module of Symphony XTS Web Trading and Mobile Trading platforms (version 2.0.0.1_P160). An authenticated remote attacker could exploit this vulnerability by manipulating parameters through HTTP request which coul</description></item></channel></rss>