PatchTheCVE: misyshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2016-5655: Misys FusionCapital Opics Plus does not verify X.509 certificates from SSL servers, which allows man-in-the-mihttps://patchthecve.com/cve/CVE-2016-5655.htmlhttps://patchthecve.com/cve/CVE-2016-5655.htmlWed, 17 Jun 2026 00:49:49 +0000MEDIUM 5.9: Misys FusionCapital Opics Plus does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate.CVE-2016-5654: Misys FusionCapital Opics Plus allows remote authenticated users to gain privileges via a man-in-the-middle athttps://patchthecve.com/cve/CVE-2016-5654.htmlhttps://patchthecve.com/cve/CVE-2016-5654.htmlWed, 17 Jun 2026 00:49:49 +0000HIGH 7.5: Misys FusionCapital Opics Plus allows remote authenticated users to gain privileges via a man-in-the-middle attack that modifies the xmlMessageOut parameter.CVE-2016-5653: Multiple SQL injection vulnerabilities in Misys FusionCapital Opics Plus allow remote authenticated users to ehttps://patchthecve.com/cve/CVE-2016-5653.htmlhttps://patchthecve.com/cve/CVE-2016-5653.htmlWed, 17 Jun 2026 00:49:49 +0000MEDIUM 6.5: Multiple SQL injection vulnerabilities in Misys FusionCapital Opics Plus allow remote authenticated users to execute arbitrary SQL commands via the (1) ID or (2) Branch parameter.