CVE-2023-30057

MediumCVSS 5.4

Published: 09/05/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.47%

37th percentile - higher than 37% of all known CVEs

Summary

Multiple stored cross-site scripting (XSS) vulnerabilities in FICO Origination Manager Decision Module 4.8.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload.

Risk Assessment

The risk includes potential theft of user sessions, takeover of administrator accounts, or distribution of malware within the organization.

Recommendation

Immediately update FICO Origination Manager Decision Module to the latest version and implement input filtering and output encoding for all user-supplied data.

Original NVD description (English source)

Multiple stored cross-site scripting (XSS) vulnerabilities in FICO Origination Manager Decision Module 4.8.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload.