← CVE Intelligence

CVE-2019-19089

eSOMS: X-Content-Type-Options Header Missing PUBLISHED

Description (CNA)

For ABB eSOMS versions 4.0 to 6.0.3, the X-Content-Type-Options Header is missing in the HTTP response, potentially causing the response body to be interpreted and displayed as different content type other than declared. A possible attack scenario would be unauthorized code execution via text interpreted as JavaScript.

Affected (CNA)

Vendor / productVersions
ABB / eSOMSaffected 4.0 to 6.0.3

CWE

CWE-16

References

ADP enrichment

CVE

No English description supplied.