Skip to content
CVE PROGRAM SOURCE RECORD9.4 Critical

CVE-2023-6097

SQL Injection on ICSSolution ICS Business Manager

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
INCIBE

Description

A SQL injection vulnerability has been found in ICS Business Manager, affecting version 7.06.0028.7089. This vulnerability could allow a remote user to send a specially crafted SQL query and retrieve all the information stored in the database. The data could also be modified or deleted, causing the application to malfunction.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ICSSolution ICS Business Manager

Default version status: unaffected

  • 7.06.0028.7089affected
  • 7.06.0028.7066affected
  • 7.06.0028.2802affected

References