CVE-2023-30057

Опубликовано: 09 мая 2023

Источник: nvd

CVSS3: 5.4

EPSS Низкий

Описание

Multiple stored cross-site scripting (XSS) vulnerabilities in FICO Origination Manager Decision Module 4.8.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload.

Ссылки

http://fico.com
Product
http://origination.com
Not Applicable
https://packetstormsecurity.com/files/172192/FICO-Origination-Manager-Decision-Module-4.8.1-XSS-Session-Hijacking.html
Third Party Advisory
VDB Entry
http://fico.com
Product
http://origination.com
Not Applicable
https://packetstormsecurity.com/files/172192/FICO-Origination-Manager-Decision-Module-4.8.1-XSS-Session-Hijacking.html
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:fico:origination_manager_decision:4.8.1:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.00444

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-cmxw-5mfj-977v