Skip to content
Sign in
6.1 Medium

CVE-2019-19089 For ABB eSOMS versions 4.0 to 6.0.3, the X-Content-Type-Options Header is missing in the HTTP response, potentially…

Description

For ABB eSOMS versions 4.0 to 6.0.3, the X-Content-Type-Options Header is missing in the HTTP response, potentially causing the response body to be interpreted and displayed as different content type other than declared. A possible attack scenario would be unauthorized code execution via text interpreted as JavaScript.

Affected products and versions

Product Affected versions Fixed in
eSOMS Versions not published

Other CVEs of eSOMS

The 13 CVEs of eSOMS →
CVE-2019-19002 For ABB eSOMS versions 4.0 to 6.0.2, the X-XSS-Protection HTTP response header is not set in responses from the web… 6.3 Medium CVE-2019-19001 For ABB eSOMS versions 4.0 to 6.0.2, the X-Frame-Options header is not configured in HTTP response 6.5 Medium CVE-2019-19000 For ABB eSOMS 4.0 to 6.0.3, the Cache-Control and Pragma HTTP header(s) have not been properly configured within the… 6.5 Medium CVE-2019-19097 ABB eSOMS versions 4.0 to 6.0.3 accept connections using medium strength ciphers 5.9 Medium
Track this CVE