Vulnerabilities

TI-2026-17448 CVE-2026-21665 · GHSA-h68v-wm52-cjcj

Deserialization of untrusted data in Fiserv Originate Loans Peripherals -- Print Service…

MEDIUM 42

The Print Service component of Fiserv Originate Loans Peripherals (formerly Velocity Services) in unsupported version 2021.2.4 (build 4.7.3155.0011) uses deprecated .NET Remoting TCP channels that allow unsafe deserializ…

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00531 Published 2026-02-23 Fixed in 2021.2.4 CWE-502

TI-2020-18411 CVE-2020-35992 · GHSA-55qq-wp4m-g5qv

Fiserv Prologue through 2020-12-16 does not properly protect the database password.

LOW 30

Fiserv Prologue through 2020-12-16 does not properly protect the database password.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00719 Published 2022-08-23 No fix listed CWE-522

TI-2020-07185 CVE-2020-8951 · GHSA-hxxc-q83m-jxjh

Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the…

LOW 25

Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the Source or Destination field of the Configuration Manager (Configuration Parameter Translation) page.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00637 Published 2020-02-26 No fix listed CWE-79

TI-2020-07186 CVE-2020-8952 · GHSA-jfx9-rv29-g4qf

Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the logout.jsp timeOut parameter.

LOW 29

Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the logout.jsp timeOut parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00734 Published 2020-02-26 No fix listed CWE-79

Vulnerabilities

Filters

Deserialization of untrusted data in Fiserv Originate Loans Peripherals -- Print Service…

Fiserv Prologue through 2020-12-16 does not properly protect the database password.

Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the…

Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the logout.jsp timeOut parameter.