Vulnerabilities > Misys > Fusioncapital Opics Plus > Medium

DATE CVE VULNERABILITY TITLE RISK
2016-07-19 CVE-2016-5655 Unspecified vulnerability in Misys Fusioncapital Opics Plus
Misys FusionCapital Opics Plus does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate.
network
high complexity
misys
5.9
2016-07-19 CVE-2016-5653 SQL Injection vulnerability in Misys Fusioncapital Opics Plus
Multiple SQL injection vulnerabilities in Misys FusionCapital Opics Plus allow remote authenticated users to execute arbitrary SQL commands via the (1) ID or (2) Branch parameter.
network
low complexity
misys CWE-89
6.5