Findings
Vulnerability Findings Queue
Synthetic high-priority findings with ownership, SLA status, and exception state.
| Finding | Asset | Business Unit | Severity | Owner | SLA | Due |
|---|---|---|---|---|---|---|
| VULN-1048CVE-2026-1842 · Remote code execution in SSO gateway component | Customer SSO Gateway | Digital Banking | Critical | Customer Identity | Overdue | 2026-06-18 |
| VULN-1027CVE-2026-0921 · Privilege escalation in tokenization service host | Card Tokenization API | Payments | Critical | Payments Engineering | Overdue | 2026-06-23 |
| VULN-1011CVE-2026-0554 · Container base image with exploitable OpenSSL package | Enterprise Container Base Image | Enterprise IT | High | Cloud Platform | Due Soon | 2026-07-03 |
| VULN-0998CVE-2025-8160 · SQL injection risk in legacy loan workflow | Loan Origination Portal | Digital Banking | High | Retail Apps | Due Soon | 2026-07-07 |
| VULN-0984CVE-2025-7442 · Unpatched data processing node exposes sensitive logs | Analytics Data Lake | Corporate | High | Data Services | Overdue | 2026-06-27 |
| VULN-0975CVE-2025-7018 · Missing secure cookie flags in advisory portal | Wealth Advisory Portal | Wealth | Medium | Wealth Digital | On Track | 2026-07-18 |
| VULN-0963CVE-2025-6931 · Unsupported middleware version on internal workflow tier | Corporate Workflow Cluster | Corporate | Medium | Enterprise Apps | On Track | 2026-07-22 |
| VULN-0951CVE-2025-6402 · Weak TLS configuration on vendor-facing endpoint | Supplier Connect Gateway | Enterprise IT | High | Network Services | Overdue | 2026-06-20 |