Beveiligingsadvies

CVE-2023-6098

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-11-13 13:13:26
Laatst bijgewerkt 2024-08-30 19:22:47
Toegewezen door INCIBE
CVSS-score 6.3
Status PUBLISHED

Beschrijving

An XSS vulnerability has been discovered in ICS Business Manager affecting version 7.06.0028.7066. A remote attacker could send a specially crafted string exploiting the obdd_act parameter, allowing the attacker to steal an authenticated user's session, and perform actions within the application.