VULNERABILITY INTELLIGENCE
CVE-2019-19091
CVSS score4.3 MEDIUM
EPSS probability0.76%
CISA KEVNot currently listed
Published2020-04-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description
For ABB eSOMS versions 4.0 to 6.0.3, HTTPS responses contain comments with sensitive information about the application. An attacker might use this detail information to specifically craft the attack.
Weakness classification
- cybersecurity@ch.abb.com: CWE-16
- nvd@nist.gov: CWE-200
Primary references
- cybersecurity@ch.abb.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory