VYPR
← All advisories
Medium severity6.3NVD Advisory· Published Apr 2, 2020· Updated Jun 17, 2026

CVE-2019-19002

CVE-2019-19002

Description

For ABB eSOMS versions 4.0 to 6.0.2, the X-XSS-Protection HTTP response header is not set in responses from the web server. For older web browser not supporting Content Security Policy, this might increase the risk of Cross Site Scripting.

Affected products

3
  • Abb/eSOMScpe-rescue2 versions
    4.0 to 6.0.2+ 1 more
    • (no CPE)range: 4.0 to 6.0.2
    • (no CPE)range: 4.0 to 6.0.2
  • Hitachienergy/Esoms
    cpe:2.3:a:hitachienergy:esoms:*:*:*:*:*:*:*:*
    Range: >=4.0,<=6.0.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.