| CVE-2019-19002 |
For ABB eSOMS versions 4.0 to 6.0.2, the X-XSS-Protection HTTP response header is not set in responses from the web…
|
6.3
Medium
|
Apr 2, 2020 |
| CVE-2019-19001 |
For ABB eSOMS versions 4.0 to 6.0.2, the X-Frame-Options header is not configured in HTTP response
|
6.5
Medium
|
Apr 2, 2020 |
| CVE-2019-19000 |
For ABB eSOMS 4.0 to 6.0.3, the Cache-Control and Pragma HTTP header(s) have not been properly configured within the…
|
6.5
Medium
|
Apr 2, 2020 |
| CVE-2019-19097 |
ABB eSOMS versions 4.0 to 6.0.3 accept connections using medium strength ciphers
|
5.9
Medium
|
Apr 2, 2020 |
| CVE-2019-19096 |
The Redis data structure component used in ABB eSOMS versions 6.0 to 6.0.2 stores credentials in clear text
|
6.1
Medium
|
Apr 2, 2020 |
| CVE-2019-19095 |
Lack of adequate input/output validation for ABB eSOMS versions 4.0 to 6.0.2 might allow an attacker to attack such as…
|
5.4
Medium
|
Apr 2, 2020 |
| CVE-2019-19094 |
Lack of input checks for SQL queries in ABB eSOMS versions 3.9 to 6.0.3 might allow an attacker SQL injection attacks…
|
7.6
High
|
Apr 2, 2020 |
| CVE-2019-19093 |
eSOMS versions 4.0 to 6.0.3 do not enforce password complexity settings, potentially resulting in lower access…
|
6.5
Medium
|
Apr 2, 2020 |
| CVE-2019-19092 |
ABB eSOMS versions 4.0 to 6.0.3 use ASP.NET Viewstate without Message Authentication Code (MAC)
|
3.5
Low
|
Apr 2, 2020 |
| CVE-2019-19091 |
For ABB eSOMS versions 4.0 to 6.0.3, HTTPS responses contain comments with sensitive information about the application
|
4.3
Medium
|
Apr 2, 2020 |
| CVE-2019-19090 |
For ABB eSOMS versions 4.0 to 6.0.2, the Secure Flag is not set in the HTTP response header
|
3.5
Low
|
Apr 2, 2020 |
| CVE-2019-19089 |
For ABB eSOMS versions 4.0 to 6.0.3, the X-Content-Type-Options Header is missing in the HTTP response, potentially…
|
6.1
Medium
|
Apr 2, 2020 |
| CVE-2019-19003 |
For ABB eSOMS versions 4.0 to 6.0.2, the HTTPOnly flag is not set
|
5.3
Medium
|
Apr 2, 2020 |