CWE-539 · 7 records
Use of Persistent Cookies Containing Sensitive Information
CVEs in this class
7 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
36Monitor | CVE-2025-27673No exploit | Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cookie Returned in Response Body OVprinterlogic · vasion print · CWE-539 | Critical9.1 | — | 0.5% | Mar 5, 2025 |
34Monitor | CVE-2024-39275No exploit | Advantech ADAM-5630 Use of Persistent Cookies Containing Sensitive Informationadvantech · adam-5630 firmware · CWE-539 | High8.5 | — | 0.4% | Sep 27, 2024 |
30Monitor | CVE-2023-30861Proof of concept | Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie headerpalletsprojects · flask · CWE-539 | High7.5 | — | 1.2% | May 2, 2023 |
21Monitor | CVE-2021-27463No exploit | A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer.emerson · x-stream enhanced xegp firmware · CWE-539 | Medium5.3 | — | 0.9% | May 20, 2021 |
21Monitor | CVE-2025-52633No exploit | HCL AION is susceptible to Missing Content-Security-Policyhcltech · aion · CWE-539 | Medium5.3 | — | 0.2% | Feb 3, 2026 |
16Monitor | CVE-2026-24318No exploit | Insecure Session Management vulnerability in SAP BusinessObjects Business Intelligence Platformsap_se · sap businessobjects business intelligence platform · CWE-539 | Medium4.2 | — | 0.1% | Apr 14, 2026 |
9Monitor | CVE-2026-35192No exploit | Session fixation via public cached pages and SESSION_SAVE_EVERY_REQUESTdjangoproject · django · CWE-539 | Low2.3 | — | 0.5% | May 5, 2026 |
- CVE-2025-2767336Monitor
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cookie Returned in Response Body OV
CriticalCVSS 9.1No exploitEPSS 0%printerlogic · vasion printMar 5, 2025
- CVE-2024-3927534Monitor
Advantech ADAM-5630 Use of Persistent Cookies Containing Sensitive Information
HighCVSS 8.5No exploitEPSS 0%advantech · adam-5630 firmwareSep 27, 2024
- CVE-2023-3086130Monitor
Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header
HighCVSS 7.5Proof of conceptEPSS 1%palletsprojects · flaskMay 2, 2023
- CVE-2021-2746321Monitor
A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer.
MediumCVSS 5.3No exploitEPSS 0%emerson · x-stream enhanced xegp firmwareMay 20, 2021
- CVE-2025-5263321Monitor
HCL AION is susceptible to Missing Content-Security-Policy
MediumCVSS 5.3No exploitEPSS 0%hcltech · aionFeb 3, 2026
- CVE-2026-2431816Monitor
Insecure Session Management vulnerability in SAP BusinessObjects Business Intelligence Platform
MediumCVSS 4.2No exploitEPSS 0%sap_se · sap businessobjects business intelligence platformApr 14, 2026
- CVE-2026-351929Monitor
Session fixation via public cached pages and SESSION_SAVE_EVERY_REQUEST
LowCVSS 2.3No exploitEPSS 0%djangoproject · djangoMay 5, 2026