Skip to content
OpenAdvisories

Archive

2 April 2020

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Low 3.3

    Firmware Analysis and Comparison Tool (FACT) 3 has Stored XSS when updating analysis details via a localhost web reques…

  • Low 3.5

    ABB eSOMS: Viewstate without MAC Signature

    ABB eSOMS versions 4.0 to 6.0.3 use ASP.NET Viewstate without Message Authentication Code (MAC). Alterations to Viewstate might thus not be noticed.

  • Low 3.5

    ABB eSOMS: Secure Flag not set

    For ABB eSOMS versions 4.0 to 6.0.2, the Secure Flag is not set in the HTTP response header. Unencrypted connections might access the cookie information, thus making it susceptible to eavesdropping.