CVE-2023-4851 PUBLISHED CVSS 6.300000190734863 MEDIUM

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects unknown code of the file ?r=dashboard/position/edit&op=member. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-239260.

EPSS 0.04% · 13.4th percentile

Risk Scores

CVSS v3.1
6.300000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
EPSS Score
0.04%
13.4th percentile

Affected Products

VendorProductVersions
IBOSOA4.5.5
ibosibos4.5.5

Timeline

References

Open in Interactive Console →