Vulnerabilities

TI-2021-19157 CVE-2021-43106 · GHSA-xhj6-r3m9-cx4x

A Header Injection vulnerability exists in Compass Plus TranzWare Online FIMI Web…

LOW 28

A Header Injection vulnerability exists in Compass Plus TranzWare Online FIMI Web Interface Tranzware Online (TWO) 5.3.33.3 F38 and FIMI 4.2.19.4 25.The HTTP host header can be manipulated and cause the application to be…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00683 Published 2022-02-14 No fix listed CWE-116

TI-2021-09360 CVE-2021-28126 · GHSA-mrpf-pxxj-fmc7

index.jsp in TranzWare e-Commerce Payment Gateway (TWEC PG) before 3.1.27.5 had a Stored…

LOW 28

index.jsp in TranzWare e-Commerce Payment Gateway (TWEC PG) before 3.1.27.5 had a Stored cross-site scripting (XSS) vulnerability

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00646 Published 2021-03-19 No fix listed CWE-79

TI-2021-09346 CVE-2021-28110 · GHSA-w56w-4253-9ggg

/exec in TranzWare e-Commerce Payment Gateway (TWEC PG) before 3.1.27.5 had a vulnerability in its XML parser.

LOW 35

/exec in TranzWare e-Commerce Payment Gateway (TWEC PG) before 3.1.27.5 had a vulnerability in its XML parser.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01013 Published 2021-03-19 No fix listed CWE-611

TI-2021-09345 CVE-2021-28109 · GHSA-xjvf-42q4-95c2

TranzWare (POI) FIMI before 4.2.20.4.2 allows login_tw.php reflected Cross-Site Scripting (XSS).

LOW 29

TranzWare (POI) FIMI before 4.2.20.4.2 allows login_tw.php reflected Cross-Site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00735 Published 2021-03-19 No fix listed CWE-79

Vulnerabilities

Filters

A Header Injection vulnerability exists in Compass Plus TranzWare Online FIMI Web…

index.jsp in TranzWare e-Commerce Payment Gateway (TWEC PG) before 3.1.27.5 had a Stored…

/exec in TranzWare e-Commerce Payment Gateway (TWEC PG) before 3.1.27.5 had a vulnerability in its XML parser.

TranzWare (POI) FIMI before 4.2.20.4.2 allows login_tw.php reflected Cross-Site Scripting (XSS).