CVE-2019-19003: Hitachienergy Esoms

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

For ABB eSOMS versions 4.0 to 6.0.2, the HTTPOnly flag is not set. This can allow Javascript to access the cookie contents, which in turn might enable Cross Site Scripting.

Affected products

• Hitachienergy Esoms: from 4.0, up to and including 6.0.2

Published 2020-04-02. Last modified 2026-06-17.