CVE-2019-19093
CVE-2019-19093 is a medium-severity vulnerability in Hitachienergy Esoms with a CVSS 3.x base score of 6.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-521.
Key facts
- Severity: Medium (CVSS 3.x base score 6.5)
- CVSS v2: 6.4
- EPSS exploit prediction: 1% (53rd percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-521
- Affected product: Hitachienergy Esoms
- Published:
- Last modified:
Description
eSOMS versions 4.0 to 6.0.3 do not enforce password complexity settings, potentially resulting in lower access security due to insecure user passwords.
Frequently asked questions
- What is CVE-2019-19093?
- eSOMS versions 4.0 to 6.0.3 do not enforce password complexity settings, potentially resulting in lower access security due to insecure user passwords.
- How severe is CVE-2019-19093?
- CVE-2019-19093 has a CVSS 3.x base score of 6.5, rated medium severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is low, integrity low, and availability none.
- Is CVE-2019-19093 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (53rd percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2019-19093?
- CVE-2019-19093 affects Hitachienergy Esoms. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2019-19093?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2019-19093 published?
- CVE-2019-19093 was published on 2020-04-02 and last updated on 2026-06-17.
References
Affected products (1)
- cpe:2.3:a:hitachienergy:esoms:*:*:*:*:*:*:*:*
More vulnerabilities in Hitachienergy Esoms
- CVE-2018-14805 — Critical (CVSS 9.8): ABB eSOMS version 6.0.2 may allow unauthorized access to the system when LDAP is set to allow anonymous authentication,…
- CVE-2019-19094 — High (CVSS 7.6): Lack of input checks for SQL queries in ABB eSOMS versions 3.9 to 6.0.3 might allow an attacker SQL injection attacks…
- CVE-2021-35527 — High (CVSS 7.5): Password autocomplete vulnerability in the web application password field of Hitachi ABB Power Grids eSOMS allows…
- CVE-2021-26845 — High (CVSS 7.5): Information Exposure vulnerability in Hitachi ABB Power Grids eSOMS allows unauthorized user to gain access to report…
- CVE-2019-19001 — Medium (CVSS 6.5): For ABB eSOMS versions 4.0 to 6.0.2, the X-Frame-Options header is not configured in HTTP response. This can…
- CVE-2019-19000 — Medium (CVSS 6.5): For ABB eSOMS 4.0 to 6.0.3, the Cache-Control and Pragma HTTP header(s) have not been properly configured within the…
All CVEs affecting Hitachienergy Esoms →
Other CWE-521 (Weak Password Requirements) vulnerabilities
- CVE-2026-25715 — Critical (CVSS 9.8): The web management interface of the device allows the administrator username and password to be set to blank values.…
- CVE-2025-53963 — Critical (CVSS 9.8): An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices. They run an SSH server accessible…
- CVE-2025-63747 — Critical (CVSS 9.8): QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and permit…
- CVE-2025-12552 — Critical (CVSS 9.8): Insufficient Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
- CVE-2025-11200 — Critical (CVSS 9.8): MLflow Weak Password Requirements Authentication Bypass Vulnerability. This vulnerability allows remote attackers to…
- CVE-2025-12364 — Critical (CVSS 9.8): Weak Password Policy.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5.
Browse all CWE-521 (Weak Password Requirements) vulnerabilities →