Esoms

This hub aggregates every CVE we track for Esoms, a product in the ics ot iot space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Esoms.

• CVE-2023-5516 Poorly constructed webap requests and URI components with special characters trigger unhandled errors and exceptions, disclosing information about the underlying technology and other sensitive inf...5.3Nov 1, 2023
• CVE-2023-5515 The responses for web queries with certain parameters disclose internal path of resources. This information can be used to learn internal structure of the application and to further plot attacks a...5.3Nov 1, 2023
• CVE-2023-5514 The response messages received from the eSOMS report generation using certain parameter queries with full file path can be abused for enumerating the local file system structure. 5.3Nov 1, 2023
• CVE-2021-35527Password Autocomplete Vulnerability in Hitachi ABB Power Grids eSOMS Application7.5Jul 14, 2021
• CVE-2021-26845eSOMS Report Function Vulnerability7.5Jun 14, 2021
• CVE-2019-19002ABB eSOMS X-XSS-Protection not enabled6.3Apr 2, 2020
• CVE-2019-19001eSOMS X-FrameOption6.5Apr 2, 2020
• CVE-2019-19000eSOMS Cachecontrol (Pragma) HTTP Header6.5Apr 2, 2020
• CVE-2019-19097ABB eSOMS: SSL medium strength Cipher Suites5.9Apr 2, 2020
• CVE-2019-19096ABB eSOMS: REDIS clear text credentials6.1Apr 2, 2020
• CVE-2019-19095ABB eSOMS: Stored XSS vulnerability5.4Apr 2, 2020
• CVE-2019-19094ABB eSOMS: SQL injection vulnerability7.6Apr 2, 2020
• CVE-2019-19093ABB eSOMS: Password complexity issue6.5Apr 2, 2020
• CVE-2019-19092ABB eSOMS: Viewstate without MAC Signature3.5Apr 2, 2020
• CVE-2019-19091ABB eSOMS: HTTP response information leakage4.3Apr 2, 2020