24 matches found
EUVD-2023-34490
Malicious code in bioql PyPI...
EUVD-2023-34489
Malicious code in bioql PyPI...
CVE-2023-30056
A session takeover vulnerability exists in FICO Origination Manager Decision Module 4.8.1 due to insufficient protection of the JSESSIONID cookie...
CVE-2023-30057
Multiple stored cross-site scripting XSS vulnerabilities in FICO Origination Manager Decision Module 4.8.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2023-30056
A session takeover vulnerability exists in FICO Origination Manager Decision Module 4.8.1 due to insufficient protection of the JSESSIONID cookie...
CVE-2023-30056
A session takeover vulnerability exists in FICO Origination Manager Decision Module 4.8.1 due to insufficient protection of the JSESSIONID cookie...
CVE-2023-30057
Multiple stored cross-site scripting XSS vulnerabilities in FICO Origination Manager Decision Module 4.8.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2023-30057
Multiple stored cross-site scripting XSS vulnerabilities in FICO Origination Manager Decision Module 4.8.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload...
Session fixation
A session takeover vulnerability exists in FICO Origination Manager Decision Module 4.8.1 due to insufficient protection of the JSESSIONID cookie...
Cross site scripting
Multiple stored cross-site scripting XSS vulnerabilities in FICO Origination Manager Decision Module 4.8.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2023-30057: Improper Neutralization of Input During Web Page Generation
Multiple stored cross-site scripting XSS vulnerabilities in FICO Origination Manager Decision Module 4.8.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2023-30057
CVE-2023-30057 corresponds to multiple stored cross-site scripting (XSS) vulnerabilities in FICO Origination Manager Decision Module 4.8.1. The available connected documents confirm the affected software is FICO Origination Manager Decision Module 4.8.1, and the root cause is stored XSS allowing ...
CVE-2023-30056: Session Fixation
A session takeover vulnerability exists in FICO Origination Manager Decision Module 4.8.1 due to insufficient protection of the JSESSIONID cookie...
CVE-2023-30057
Multiple stored cross-site scripting XSS vulnerabilities in FICO Origination Manager Decision Module 4.8.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2023-30056
A session takeover vulnerability exists in FICO Origination Manager Decision Module 4.8.1 due to insufficient protection of the JSESSIONID cookie...
CVE-2023-30056
A session takeover vulnerability exists in FICO Origination Manager Decision Module 4.8.1 due to insufficient protection of the JSESSIONID cookie...
PT-2023-22521
Name of the Vulnerable Software and Affected Versions FICO Origination Manager Decision Module version 4.8.1 Description The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload, due to multiple stored cross-site scripting XSS vulnerabilities. This enables attacke...
CVE-2023-30056
CVE-2023-30056 affects FICO Origination Manager Decision Module 4.8.1. The vulnerability is a session takeover caused by insufficient protection of the JSESSIONID cookie. According to the sources, the CVSSv3.1 base score is 7.5 (HIGH), with Network attack vector, no user interaction, and no privi...
PT-2023-22520
Name of the Vulnerable Software and Affected Versions FICO Origination Manager Decision Module version 4.8.1 Description A session takeover issue exists due to insufficient protection of the JSESSIONID cookie. Recommendations For FICO Origination Manager Decision Module version 4.8.1, consider...