CVE-2023-6097: SQL Injection on ICSSolution ICS Business Manager

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-11-13 · updated 2026-06-17
Weakness: CWE-89

Description

A SQL injection vulnerability has been found in ICS Business Manager, affecting version 7.06.0028.7089. This vulnerability could allow a remote user to send a specially crafted SQL query and retrieve all the information stored in the database. The data could also be modified or deleted, causing the application to malfunction.

Affected products

ICSSolution ICS Business Manager: 7.06.0028.2802, 7.06.0028.7066, 7.06.0028.7089

References

https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-icssolution-ics-business-manager
https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-icssolution-ics-business-manager

Get alerted when CVE-2023-6097 or the next vulnerability affects your stack