Beveiligingsadvies

CVE-2019-19089

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-04-02 19:46:36

Laatst bijgewerkt 2024-08-05 02:09:39

Toegewezen door ABB

CVSS-score 6.1

Status PUBLISHED

Beschrijving

For ABB eSOMS versions 4.0 to 6.0.3, the X-Content-Type-Options Header is missing in the HTTP response, potentially causing the response body to be interpreted and displayed as different content type other than declared. A possible attack scenario would be unauthorized code execution via text interpreted as JavaScript.

← Alle CVE's bekijken Bekijk op cve.org ↗