FICO, founded in 1956, is best known for credit scoring but also offers fraud-detection and cybersecurity risk-analytics products.
Multiple stored cross-site scripting (XSS) vulnerabilities in FICO Origination Manager Decision Module 4.8.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload.
A session takeover vulnerability exists in FICO Origination Manager Decision Module 4.8.1 due to insufficient protection of the JSESSIONID cookie.
No datasheets, whitepapers, case studies, videos, or demos linked yet.