Vulnerability Details CVE-2023-6097
A SQL injection vulnerability has been found in ICS Business Manager, affecting version 7.06.0028.7089. This vulnerability could allow a remote user to send a specially crafted SQL query and retrieve all the information stored in the database. The data could also be modified or deleted, causing the application to malfunction.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 34.8%
CVSS Severity
CVSS v3 Score 9.4
References
Products affected by CVE-2023-6097
-
cpe:2.3:a:icssolution:ics_business_manager:7.06.0028.2802
-
cpe:2.3:a:icssolution:ics_business_manager:7.06.0028.7066
-
cpe:2.3:a:icssolution:ics_business_manager:7.06.0028.7089