CVE-2019-19094

CWE-89 — SQL Injection3 documents3 sources
Severity
7.6HIGH
EPSS
0.4%
top 42.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Hitachienergy EsomsABB Esoms
Timeline
PublishedApr 2
Latest updateMay 24

Description

Lack of input checks for SQL queries in ABB eSOMS versions 3.9 to 6.0.3 might allow an attacker SQL injection attacks against the backend database.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:LExploitability: 2.8 | Impact: 4.7

Affected Packages2 packages

▶NVDhitachienergy/esoms3.9 — 6.0.3
▶CVEListV5abb/esoms3.9 to 6.0.3

🔴Vulnerability Details

2
GHSA
GHSA-wx45-qjwh-7qwp: Lack of input checks for SQL queries in ABB eSOMS versions 3↗2022-05-24
▶
CVEList
ABB eSOMS: SQL injection vulnerability↗2020-04-02
▶
CVE-2019-19094 (HIGH CVSS 7.6) | Lack of input checks for SQL querie | cvebase.io