CVE-2019-19094 - ABB eSOMS: SQL injection vulnerability

HIGH

ABB eSOMS: SQL injection vulnerability

Published Apr 2, 2020

7.6

HIGH

CVSS 3.1

EPSS 0.94%

Lack of input checks for SQL queries in ABB eSOMS versions 3.9 to 6.0.3 might allow an attacker SQL injection attacks against the backend database.

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
ABB	eSOMS	unknown	Affected 3.9 to 6.0.3

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8733		Advisory
https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch		x_refsource_CONFIRMVendor Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner ABB

Published Apr 2, 2020

Updated Aug 5, 2024

Reserved Nov 18, 2019

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner ABB

Published Apr 2, 2020

Updated Aug 5, 2024

GitHub

No data