Vulnerabilities > Compassplus > Tranzware Online Financial Institution Maintenance Interface > Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2022-02-14	CVE-2021-43106	Improper Encoding or Escaping of Output vulnerability in Compassplus products A Header Injection vulnerability exists in Compass Plus TranzWare Online FIMI Web Interface Tranzware Online (TWO) 5.3.33.3 F38 and FIMI 4.2.19.4 25.The HTTP host header can be manipulated and cause the application to behave in unexpected ways. network low complexity compassplus CWE-116	6.1

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.