CVE-2023-6098

MEDIUM 6.1CVE-2023-6098 · Published 13/11/2023 · updated 17/06/2026

In short

CVE-2023-6098 is a MEDIUM (CVSS 6.1) vulnerability affecting ics business manager (icssolution).
Chance of exploitation in the next 30 days (EPSS): 0.49%, higher than 42.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ics business manager icssolution	`= 7.06.0028.2802= 7.06.0028.7066= 7.06.0028.7089`	No fix yet

Description

An XSS vulnerability has been discovered in ICS Business Manager affecting version 7.06.0028.7066. A remote attacker could send a specially crafted string exploiting the obdd_act parameter, allowing the attacker to steal an authenticated user's session, and perform actions within the application.

References

incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-icssolution-ics-business-manager · Third Party Advisory

More vulnerabilities in ics business manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free