Skip to content

CVE-2016-5654 Misys FusionCapital Opics Plus allows remote authenticated users to gain privileges via a man-in-the-middle attack that modifies the xmlMessageOut parameter.

HighCVSS 7.5 EPSS 1.6%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Misys FusionCapital Opics Plus allows remote authenticated users to gain privileges via a man-in-the-middle attack that modifies the xmlMessageOut parameter.

Affected products

ProductAffected versionsFixed in
misys fusioncapital opics plus All versions No fix listed

References

  • VU#682704 third-party-advisory us-government-resource
  • 92035 vdb-entry