The Print Service component of Fiserv Originate Loans Peripherals (formerly Velocity Services) in unsupported version 2021.2.4 (build 4.7.3155.0011) uses deprecated .NET Remoting TCP channels that allow unsafe deserializ…
CVSS 4.0HIGH 7.7·Network·No auth·User interaction·EPSS 0.00531·Published 2026-02-23·Fixed in 2021.2.4CWE-502
Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the Source or Destination field of the Configuration Manager (Configuration Parameter Translation) page.