Read the docs

Compassplus

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Compassplus records in CISA KEV

No Compassplus vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Tranzware E-commerce Payment Gateway 2 records LOW Tranzware Fimi 1 record LOW Tranzware Online 1 record LOW Tranzware Online Financial Institution Maintenance Interface 1 record LOW

Records

1 record in Tranzware Online Financial Institution Maintenance Interface · all components

TI-2021-19157 CVE-2021-43106 · GHSA-xhj6-r3m9-cx4x

A Header Injection vulnerability exists in Compass Plus TranzWare Online FIMI Web…

Priority LOW 28

A Header Injection vulnerability exists in Compass Plus TranzWare Online FIMI Web Interface Tranzware Online (TWO) 5.3.33.3 F38 and FIMI 4.2.19.4 25.The HTTP host header can be manipulated and cause the application to be…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00683 Published 2022-02-14 No fix listed CWE-116
Open these records in search →