Known vulnerabilities in eSOMS

Known vulnerabilities in eSOMS

Vendor: ABB

Software: eSOMS

Software CPE: cpe:2.3:a:abb:esoms:*:*:*:*:*:*:*:*

Website: https://new.abb.com/

Total vulnerabilities: 19

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (19)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU82965 - Exposure of sensitive information to an unauthorized actor CVE-2023-5516	CWE-200	Medium	No	No	-	10.11.2023	SB2023111013
#VU82964 - Exposure of sensitive information to an unauthorized actor CVE-2023-5515	CWE-200	Medium	No	No	-	10.11.2023	SB2023111013
#VU82963 - Information Exposure Through an Error Message CVE-2023-5514	CWE-209	Medium	No	No	-	10.11.2023	SB2023111013
#VU55440 - Insufficiently Protected Credentials CVE-2021-35527	CWE-522	Medium	No	No	6.3.1	30.07.2021	SB2021073001
#VU51600 - Exposure of sensitive information to an unauthorized actor CVE-2021-26845	CWE-200	Medium	No	No	6.0.4.2.2, 6.1.4, 6.3	22.03.2021	SB2021032212
#VU26071 - Inadequate Encryption Strength CVE-2019-19097	CWE-326	Medium	No	No	6.1	13.03.2020	SB2020031313
#VU26070 - Cleartext Storage of Sensitive Information CVE-2019-19096	CWE-312	Low	No	No	6.0.3	13.03.2020	SB2020031314
#VU26069 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-19095	CWE-79	Low	No	No	6.0.3	13.03.2020	SB2020031314
#VU26068 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2019-19094	CWE-89	High	No	No	6.1	13.03.2020	SB2020031313
#VU26067 - Weak Password Requirements CVE-2019-19093	CWE-521	Medium	No	No	6.0.3	13.03.2020	SB2020031314
#VU26066 - External Control of Critical State Data CVE-2019-19092	CWE-642	Low	No	No	6.0.3	13.03.2020	SB2020031314
#VU26065 - Exposure of sensitive information to an unauthorized actor CVE-2019-19091	CWE-200	Low	No	No	6.1	13.03.2020	SB2020031313
#VU26064 - CVE-2019-19090		Low	No	No	6.0.3	13.03.2020	SB2020031314
#VU26063 - Protection Mechanism Failure CVE-2019-19089	CWE-693	High	No	No	6.1	13.03.2020	SB2020031313
#VU26062 - Sensitive Cookie Without 'HttpOnly' Flag CVE-2019-19003	CWE-1004	Medium	No	No	6.0.3	13.03.2020	SB2020031314
#VU26061 - Improper Neutralization of HTTP Headers for Scripting Syntax CVE-2019-19002	CWE-644	Medium	No	No	6.0.3	13.03.2020	SB2020031314
#VU26060 - Improper Restriction of Rendered UI Layers or Frames CVE-2019-19001	CWE-1021	Medium	No	No	6.0.3	13.03.2020	SB2020031314
#VU26059 - Use of Web Browser Cache Containing Sensitive Information CVE-2019-19000	CWE-525	Medium	No	No	6.1	13.03.2020	SB2020031313
#VU14550 - Improper Authentication CVE-2018-14805	CWE-287	Low	No	No	-	28.08.2018	SB2018082904