CVE-2019-19001: Hitachienergy Esoms

Medium severity, CVSS 6.5. EPSS: 1.6% chance of exploitation in the next 30 days.

For ABB eSOMS versions 4.0 to 6.0.2, the X-Frame-Options header is not configured in HTTP response. This can potentially allow 'ClickJacking' attacks where an attacker can frame parts of the application on a malicious web site, revealing sensitive user information such as authentication credentials.

Affected products

• Hitachienergy Esoms: from 4.0, up to and including 6.0.2

Published 2020-04-02. Last modified 2026-06-17.