Key Banking Software Vulnerability Issues: An OWASP Top 10-Based Assessment of NVD Data (2022–2024)

Financial information is extremely valuable, so the international banking sector is a top target for hackers. This paper tackled the most common cyberattack techniques focusing on established financial software vendors throughout the period 2022-2024. We gathered and analyzed 150 vulnerability data (CVEs) from the National Vulnerability Database (NVD) related to the key banking companies including SWIFT, Fiserv, and Temenos. The vulnerabilities were identified according to the OWASP Top 10 (2021) technique. The results obtained indicate that the most common vulnerability groups are Injection (A03) and Identification and Authentication Failures (A07). Further, a significant percentage of these vulnerabilities were assessed as High or Critical severity. This research strongly recommends banks adopt a Zero Trust Architecture, implement Multi-Factor Authentication (MFA), and regularly test their APIs to avoid these vulnerabilities.