| Package | Affected versions | Patched versions |
|---|---|---|
| esoms | ≥ 4.0, ≤ 6.0.2 |
For ABB eSOMS versions 4.0 to 6.0.2, the X-Frame-Options header is not configured in HTTP response. This can potentially allow 'ClickJacking' attacks where an attacker can frame parts of the application on a malicious web site, revealing sensitive user information such as authentication credentials.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free