Lucene search
PRIOn knowledge basePRION:CVE-2023-6098HistoryNov 13, 2023 - 1:15 p.m.
Cross site scripting
2023-11-1313:15:00
PRIOn knowledge base
www.prio-n.com
2
cross site scripting
ics business manager
remote attacker
obdd_act parameter
authenticated user's session
application security
An XSS vulnerability has been discovered in ICS Business Manager affecting version 7.06.0028.7066. A remote attacker could send a specially crafted string exploiting the obdd_act parameter, allowing the attacker to steal an authenticated user’s session, and perform actions within the application.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ics_business_manager | eq | 7.06.0028.7089 | |
| ics_business_manager | eq | 7.06.0028.2802 | |
| ics_business_manager | eq | 7.06.0028.7066 |
Related
cvelist
cvelist
CVE-2023-6098 Cross-site Scripting on ICSSolution ICS Business Manager
2023-11-13 13:13:26
cve
cve
CVE-2023-6098
2023-11-13 13:15:08
nvd
nvd
CVE-2023-6098
2023-11-13 13:15:08