5.3
Moyenne
CVE-2019-19003 For ABB eSOMS versions 4.0 to 6.0.2, the HTTPOnly flag is not set
Description
For ABB eSOMS versions 4.0 to 6.0.2, the HTTPOnly flag is not set. This can allow Javascript to access the cookie contents, which in turn might enable Cross Site Scripting.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| eSOMS | Versions non publiées |
Autres CVE de eSOMS
Les 13 CVE de eSOMS →
CVE-2019-19002
For ABB eSOMS versions 4.0 to 6.0.2, the X-XSS-Protection HTTP response header is not set in responses from the web…
6.3
Moyenne
CVE-2019-19001
For ABB eSOMS versions 4.0 to 6.0.2, the X-Frame-Options header is not configured in HTTP response
6.5
Moyenne
CVE-2019-19000
For ABB eSOMS 4.0 to 6.0.3, the Cache-Control and Pragma HTTP header(s) have not been properly configured within the…
6.5
Moyenne
CVE-2019-19097
ABB eSOMS versions 4.0 to 6.0.3 accept connections using medium strength ciphers
5.9
Moyenne