Advisories · Technology
ABB eSOMS.
Every CVE that names ABB eSOMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.3 Medium
ABB eSOMS X-XSS-Protection not enabled
- ABB eSOMS
- Cross-site scripting (XSS)
- CWE-16
- CVSS 6.5 Medium
eSOMS X-FrameOption
- ABB eSOMS
- CWE-16
- CVSS 6.5 Medium
eSOMS Cachecontrol (Pragma) HTTP Header
- ABB eSOMS
- CWE-16
- CWE-202
- CVSS 5.9 Medium
ABB eSOMS: SSL medium strength Cipher Suites
- ABB eSOMS
- Weak cryptography or TLS
- CWE-16
- CVSS 6.1 Medium
ABB eSOMS: REDIS clear text credentials
- ABB eSOMS
- CWE-257
- CVSS 5.4 Medium
ABB eSOMS: Stored XSS vulnerability
- ABB eSOMS
- CWE-20
- CVSS 7.6 High
ABB eSOMS: SQL injection vulnerability
- ABB eSOMS
- SQL injection
- CVSS 6.5 Medium
ABB eSOMS: Password complexity issue
- ABB eSOMS
- Hard-coded credentials
- CVSS 3.5 Low
ABB eSOMS: Viewstate without MAC Signature
- ABB eSOMS
- CWE-16
- CVSS 4.3 Medium
ABB eSOMS: HTTP response information leakage
- ABB eSOMS
- CWE-16
- CWE-202
- CVSS 3.5 Low
ABB eSOMS: Secure Flag not set
- ABB eSOMS
- CWE-16
- CVSS 6.1 Medium
eSOMS: X-Content-Type-Options Header Missing
- ABB eSOMS
- CWE-16
- CVSS 5.3 Medium
ABB eSOMS: HTTPOnly flag not set
- ABB eSOMS
- Cross-site scripting (XSS)
- CWE-16