NA

CVE-2023-30056

Published: 09/05/2023 Updated: 16/05/2023
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

A session takeover vulnerability exists in FICO Origination Manager Decision Module 4.8.1 due to insufficient protection of the JSESSIONID cookie.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

fico origination manager decision 4.8.1

Exploits

Multiple persistent cross site scripting vulnerabilities in FICO Origination Manager Decision Module version 481 allow an attacker to execute code in the context of the victim's browser using a crafted payload Additionally, an attacker with initial access to the application, can get the JSESSIONID cookie of another user and take over their sessi ...