Vulnerabilities

TI-2016-04915 CVE-2016-5655 · GHSA-xpvq-3p7m-m5gw

Misys FusionCapital Opics Plus does not verify X.509 certificates from SSL servers, which…

LOW 27

Misys FusionCapital Opics Plus does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.00566 Published 2016-07-19 No fix listed

TI-2016-04914 CVE-2016-5654 · GHSA-vrcg-pvvv-j5fm

Misys FusionCapital Opics Plus allows remote authenticated users to gain privileges via a…

LOW 36

Misys FusionCapital Opics Plus allows remote authenticated users to gain privileges via a man-in-the-middle attack that modifies the xmlMessageOut parameter.

CVSS 3.0HIGH 7.5 Network Low privileges No interaction EPSS 0.01555 Published 2016-07-19 No fix listed CWE-264

TI-2016-04913 CVE-2016-5653 · GHSA-w9rq-q452-93f9

Multiple SQL injection vulnerabilities in Misys FusionCapital Opics Plus allow remote…

LOW 31

Multiple SQL injection vulnerabilities in Misys FusionCapital Opics Plus allow remote authenticated users to execute arbitrary SQL commands via the (1) ID or (2) Branch parameter.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0112 Published 2016-07-19 No fix listed CWE-89

Vulnerabilities

Filters

Misys FusionCapital Opics Plus does not verify X.509 certificates from SSL servers, which…

Misys FusionCapital Opics Plus allows remote authenticated users to gain privileges via a…

Multiple SQL injection vulnerabilities in Misys FusionCapital Opics Plus allow remote…