Approved changes feed: RSS · Atom

cpe:2.3:a:icssolution:ics_business_manager:7.06.0028.7066:*:*:*:*:*:*:*

part: a version: 7.06.0028.7066 update: *

VendorIcssolution (d23b0e02-33d7-5e5b-80cc-cfb3caa0f73a)
ProductIcs Business Manager (773c0d63-e116-543b-8a0e-cb0966a3d93c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-6098 vulnerable 2026-06-08 06:19:45.571367 Cross-site Scripting on ICSSolution ICS Business Manager
MEDIUM (6.3)
An XSS vulnerability has been discovered in ICS Business Manager affecting version 7.06.0028.7066. A remote attacker could send a specially crafted string exploiting the obdd_act parameter, allowing the attacker to steal an authenticated user's session, and perform actions within the application.
Published: 2023-11-13T13:13:26.543Z
Updated: 2024-08-30T19:22:47.444Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6097 vulnerable 2026-06-08 06:19:45.569560 SQL Injection on ICSSolution ICS Business Manager
CRITICAL (9.4)
A SQL injection vulnerability has been found in ICS Business Manager, affecting version 7.06.0028.7089. This vulnerability could allow a remote user to send a specially crafted SQL query and retrieve all the information stored in the database. The data could also be modified or deleted, causing the application to malfunction.
Published: 2023-11-13T13:11:01.674Z
Updated: 2024-09-03T19:39:23.123Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.