CVE-2023-30056

HighCVSS 7.5

Published: 09/05/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.72%

50th percentile - higher than 50% of all known CVEs

Summary

A session takeover vulnerability exists in FICO Origination Manager Decision Module 4.8.1 due to insufficient protection of the JSESSIONID cookie.

Risk Assessment

An attacker can hijack an administrator's or other authenticated user's session, gaining unauthorized access to the system and data.

Recommendation

Immediately update to the latest version of FICO Origination Manager Decision Module and implement session cookie protection mechanisms (e.g., Secure, HttpOnly, SameSite).

Other vulnerabilities in FICO Origination Manager Decision Module

CVE-2023-30057Medium
Multiple stored cross-site scripting (XSS) vulnerabilities in FICO Origination Manager Decision Module 4.8.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload.

Original NVD description (English source)

A session takeover vulnerability exists in FICO Origination Manager Decision Module 4.8.1 due to insufficient protection of the JSESSIONID cookie.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS