CVE-2020-8952: Fiserv Accurate Reconciliation

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the logout.jsp timeOut parameter.

Affected products

• Fiserv Accurate Reconciliation: from 2.19.0, before 3.0.0 (fixed in 3.0.0)

Published 2020-02-26. Last modified 2026-06-17.