CVE-2023-6098

CVE-2023-6098 relates to an XSS vulnerability in ICS Business Manager, version 7.06.0028.7066. The flaw affects the obdd_act/obdd act parameter, enabling a remote attacker to steal an authenticated user’s session and perform actions within the application. Technical details across sources confirm...

CVE-2023-6097

The CVE-2023-6097 issue affects ICS Business Manager v7.06.0028.7089 and is a SQL injection in the application’s handling of queries. The vulnerability could allow a remote attacker to execute crafted SQL, enabling retrieval of all database information and potential modification or deletion of da...