Approved changes feed: RSS · Atom

cpe:2.3:a:abb:esoms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAbb (6be1db4f-4f59-5a03-a118-0ff43377170e)
ProductEsoms (0660980e-2146-55ef-9ce5-99f3df9f4807)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-19097 vulnerable 2026-06-08 05:13:21.490641 ABB eSOMS: SSL medium strength Cipher Suites
MEDIUM (5.9)
ABB eSOMS versions 4.0 to 6.0.3 accept connections using medium strength ciphers. If a connection is enabled using such a cipher, an attacker might be able to eavesdrop and/or intercept the connection.
Published: 2020-04-02T19:48:26.000Z
Updated: 2024-08-05T02:09:39.210Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19096 vulnerable 2026-06-08 05:13:21.490311 ABB eSOMS: REDIS clear text credentials
MEDIUM (6.1)
The Redis data structure component used in ABB eSOMS versions 6.0 to 6.0.2 stores credentials in clear text. If an attacker has file system access, this can potentially compromise the credentials' confidentiality.
Published: 2020-04-02T19:48:02.000Z
Updated: 2024-08-05T02:09:39.348Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19095 vulnerable 2026-06-08 05:13:21.489915 ABB eSOMS: Stored XSS vulnerability
MEDIUM (5.4)
Lack of adequate input/output validation for ABB eSOMS versions 4.0 to 6.0.2 might allow an attacker to attack such as stored cross-site scripting by storing malicious content in the database.
Published: 2020-04-02T19:47:46.000Z
Updated: 2024-08-05T02:09:39.185Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19094 vulnerable 2026-06-08 05:13:21.489585 ABB eSOMS: SQL injection vulnerability
HIGH (7.6)
Lack of input checks for SQL queries in ABB eSOMS versions 3.9 to 6.0.3 might allow an attacker SQL injection attacks against the backend database.
Published: 2020-04-02T19:47:32.000Z
Updated: 2024-08-05T02:09:39.344Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19093 vulnerable 2026-06-08 05:13:21.489178 ABB eSOMS: Password complexity issue
MEDIUM (6.5)
eSOMS versions 4.0 to 6.0.3 do not enforce password complexity settings, potentially resulting in lower access security due to insecure user passwords.
Published: 2020-04-02T19:47:23.000Z
Updated: 2024-08-05T02:09:39.388Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19092 vulnerable 2026-06-08 05:13:21.488785 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19091 vulnerable 2026-06-08 05:13:21.488456 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19090 vulnerable 2026-06-08 05:13:21.487971 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19089 vulnerable 2026-06-08 05:13:21.487651 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19003 vulnerable 2026-06-08 05:13:21.304888 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19002 vulnerable 2026-06-08 05:13:21.304448 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19001 vulnerable 2026-06-08 05:13:21.303985 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19000 vulnerable 2026-06-08 05:13:21.302635 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.