Vulnerabilities > Compassplus > Tranzware Online Financial Institution Maintenance Interface

DATE CVE VULNERABILITY TITLE RISK
2022-02-14 CVE-2021-43106 Improper Encoding or Escaping of Output vulnerability in Compassplus products
A Header Injection vulnerability exists in Compass Plus TranzWare Online FIMI Web Interface Tranzware Online (TWO) 5.3.33.3 F38 and FIMI 4.2.19.4 25.The HTTP host header can be manipulated and cause the application to behave in unexpected ways.
5.8