← Back

Misys

misys

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Fusioncapital Opics Plus
fusioncapital_opics_plus
3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2016-5655
1Misys
1Fusioncapital Opics Plus
May 6, 2026
Jul 19, 2016
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
Misys FusionCapital Opics Plus does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate.
CVE-2016-5654
1Misys
1Fusioncapital Opics Plus
May 6, 2026
Jul 19, 2016
N/A· v4
7.5 HIGH· v3
8.5 HIGH· v2
Misys FusionCapital Opics Plus allows remote authenticated users to gain privileges via a man-in-the-middle attack that modifies the xmlMessageOut parameter.
CVE-2016-5653
1Misys
1Fusioncapital Opics Plus
May 6, 2026
Jul 19, 2016
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Multiple SQL injection vulnerabilities in Misys FusionCapital Opics Plus allow remote authenticated users to execute arbitrary SQL commands via the (1) ID or (2) Branch parameter.