CVE-2019-19002

For ABB eSOMS versions 4.0 to 6.0.2, the X-XSS-Protection HTTP response header is not set in responses from the web server. For older web browser not supporting Content Security Policy, this might increase the risk of Cross Site Scripting...

CVE-2019-19002

ABB eSOMS CVE-2019-19002 affects versions 4.0–6.0.2 where the X-XSS-Protection header is not set in web server responses, potentially enabling cross-site scripting on older browsers without CSP support. Connected documents also describe related issues in the same ABB eSOMS family and correlate th...