Lucene search
PRIOn knowledge basePRION:CVE-2019-19089HistoryApr 02, 2020 - 8:15 p.m.
Type confusion
2020-04-0220:15:00
PRIOn knowledge base
www.prio-n.com
4
For ABB eSOMS versions 4.0 to 6.0.3, the X-Content-Type-Options Header is missing in the HTTP response, potentially causing the response body to be interpreted and displayed as different content type other than declared. A possible attack scenario would be unauthorized code execution via text interpreted as JavaScript.
Related
cvelist
cvelist
CVE-2019-19089 eSOMS: X-Content-Type-Options Header Missing
2020-04-02 19:46:36
cve
cve
CVE-2019-19089
2020-04-02 20:15:14
nvd
nvd
CVE-2019-19089
2020-04-02 20:15:14
ics
ics
ABB eSOMS
2020-03-31 12:00:00