Skip to content
Sign in
6.3 Medium

CVE-2019-19002 For ABB eSOMS versions 4.0 to 6.0.2, the X-XSS-Protection HTTP response header is not set in responses from the web…

Description

For ABB eSOMS versions 4.0 to 6.0.2, the X-XSS-Protection HTTP response header is not set in responses from the web server. For older web browser not supporting Content Security Policy, this might increase the risk of Cross Site Scripting.

Affected products and versions

Product Affected versions Fixed in
eSOMS Versions not published

Other CVEs of eSOMS

The 13 CVEs of eSOMS →
CVE-2019-19001 For ABB eSOMS versions 4.0 to 6.0.2, the X-Frame-Options header is not configured in HTTP response 6.5 Medium CVE-2019-19000 For ABB eSOMS 4.0 to 6.0.3, the Cache-Control and Pragma HTTP header(s) have not been properly configured within the… 6.5 Medium CVE-2019-19097 ABB eSOMS versions 4.0 to 6.0.3 accept connections using medium strength ciphers 5.9 Medium CVE-2019-19096 The Redis data structure component used in ABB eSOMS versions 6.0 to 6.0.2 stores credentials in clear text 6.1 Medium
Track this CVE