Key Banking Software Vulnerability Issues: An OWASP Top 10-Based Assessment of NVD Data (2022–2024)

1. Azura, Y. T. Y., Azad, M. A., & Ahmed, Y. (2025). An integrated cyber security risk management framework for online banking systems. Journal of Banking and Financial Technology, 9(1), 85–104. https://doi.org/10.1007/s42786-025-00056-3
2. Bach-Nutman, M. (2020). Understanding The Top 10 OWASP Vulnerabilities. http://arxiv.org/abs/2012.09960
3. Basak, A., & Tiwari, D. (2025). API security risk and resilience in financial institutions. In Laurea University of Applied Sciences (pp. 1–68). https://www.theseus.fi/handle/10024/883344
4. Chiboora, T. H., Chacha, L., Byagutangaza, T., & Gueye, A. (2023). Evaluating Mobile Banking Application Security Posture Using the OWASP’s MASVS Framework. In COMPASS 2023 - Proceedings of the ACM SIGCAS/SIGCHI Conference on Computing and Sustainable Societies (Vol. 1, Issue 1). Association for Computing Machinery. https://doi.org/10.1145/3588001.3609367
5. Cullet, M. (2025). API Vulnerability Detection in Open Banking Ecosystems. December.
6. Darem, A. A., Alhashmi, A. A., Alkhaldi, T. M., Alashjaee, A. M., Alanazi, S. M., & Ebad, S. A. (2023). Cyber Threats Classifications and Countermeasures in Banking and Financial Sector. IEEE Access, 11(October), 125138–125158. https://doi.org/10.1109/ACCESS.2023.3327016
7. Faozi, R. A., Majid, N. W. A., & Widodo, S. (2026). Security Maturity Assessment of Indonesian Android Mobile Banking Apps using MobSF and OWASP. Edumatic: Jurnal Pendidikan Informatika, 10(1), 80–89. https://doi.org/10.29408/edumatic.v10i1.33285
8. Ghelani, D., Kian Hua, T., Kumar, S., & Koduru, R. (2022). Cyber Security Threats, Vulnerabilities, and Security Solutions Models in Banking. American Journal of Computer Science and Technology, x, No. x, x–x. https://doi.org/10.11648/j.xxx.xxxxxxxx.xx
9. https://www.verizon.com/business/resources/reports/dbir/?spm=a2ty_o01.29997173.0.0.2dab55fbkJU9wv. (n.d.).
10. Kadir, F. M., Irsan, M., & Putrada, A. G. (2025). Benchmarking Mobile Apps Security in Universities: An OWASP Mobile Top 10 Framework Perspective. International Journal on Information and Communication Technology (IJoICT), 11(1), 36–49. https://doi.org/10.21108/ijoict.v11i1.9094
11. Khalid, K. A. (2020). Security Evaluation of Mobile Banking Applications In Sudan. http://repository.sustech.edu/handle/123456789/25855%0Ahttp://repository.sustech.edu/bitstream/handle/123456789/25855/Research.pdf?sequence=2
12. Lansky, J., Ali, S., Mohammadi, M., Majeed, M. K., Karim, S. H. T., Rashidi, S., Hosseinzadeh, M., & Rahmani, A. M. (2021). Deep Learning-Based Intrusion Detection Systems: A Systematic Review. IEEE Access, 9, 101574–101599. https://doi.org/10.1109/ACCESS.2021.3097247
13. Titiakarawongse, C., Taksin, S., Ruangsawat, J., Deeduangpan, K., & Boonkrong, S. (2024). Comparative Vulnerability Analysis of Thai and Non-Thai Mobile Banking Applications. Journal of Cybersecurity and Privacy, 4(3), 650–662. https://doi.org/10.3390/jcp4030031.