What is CVE-2019-19090?

CVE-2019-19090 is a low-severity vulnerability in Abb Esoms, classified under CWE-16. CVSS score: 3.5/10. Published 2020-04-02.

How severe is CVE-2019-19090?

Low severity. CVSS v3 base score is 3.5 out of 10.

Vulnerability in Abb Esoms

CVE-2019-19090

For ABB eSOMS versions 4.0 to 6.0.2, the Secure Flag is not set in the HTTP response header. Unencrypted connections might access the cookie information, thus making it susceptible to eavesdropping.

Published 2020-04-02 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 3.5 (Low). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N.

EPSS exploit prediction

EPSS: 0.005 (41.7th percentile), scored 2026-09-29.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 42nd percentile — 41.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.005 · newest: 0.005 · change: 0.000

Affected products

Abb Esoms — versions 4.0 to 6.0.2
Hitachienergy Esoms

Weakness classification (CWE)

References

search.abb.com/library/Download.aspx (Vendor Advisory)

Frequently asked questions

What is CVE-2019-19090?: CVE-2019-19090 is a low-severity vulnerability in Abb Esoms, classified under CWE-16. CVSS score: 3.5/10. Published 2020-04-02.
How severe is CVE-2019-19090?: Low severity. CVSS v3 base score is 3.5 out of 10.