CVE-2019-19003

MEDIUM · CVSS 5.3 EPSS 0.77%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-04-02 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2019-19003

Severity

MEDIUM

CVSS

5.3

EPSS

0.77%

Java

Original NVD Description

For ABB eSOMS versions 4.0 to 6.0.2, the HTTPOnly flag is not set. This can allow Javascript to access the cookie contents, which in turn might enable Cross Site Scripting.