CWE-1275 · 13 kayıt
Sensitive Cookie with Improper SameSite Attribute
Bu sınıftaki CVE’ler
13 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-6611İstismar yok | Incorrect handling of SameSite cookiesmozilla · firefox · CWE-1275 | Kritik9,8 | — | %0,7 | 9 Tem 2024 |
35İzleyin | CVE-2025-52628İstismar yok | HCL AION is susceptible to Missing SameSite vulnerabilityhcltech · aion · CWE-1275 | Yüksek8,8 | — | %0,2 | 3 Şub 2026 |
34İzleyin | CVE-2023-53957İstismar yok | Kimai 1.30.10 SameSite Cookie Vulnerability Session Hijackingkimai · kimai · CWE-1275 | Yüksek8,5 | — | %0,6 | 19 Ara 2025 |
30İzleyin | CVE-2026-47889İstismar yok | Spring Framework sameSite Attribute Dropped in JettyCoreServerHttpResponsevmware · spring framework · CWE-1275 | Yüksek7,5 | — | %0,4 | 27 Ağu 2026 |
30İzleyin | CVE-2025-36134İstismar yok | IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosureibm · sterling b2b integrator · CWE-1275 | Yüksek7,5 | — | %0,3 | 25 Kas 2025 |
27İzleyin | CVE-2026-107280İstismar yok | AsyncHttpClient: Cookie Domain attribute is not checked against the public suffix list, so a cookie can be set for co.ukasynchttpclient · async-http-client · CWE-1275 | Orta6,9 | — | %0,3 | 5 gün önce |
26İzleyin | CVE-2023-30674İstismar yok | Improper configuration in Samsung Internet prior to version 21.0.0.41 allows attacker to bypass SameSite Cookie.samsung · internet · CWE-1275 | Orta6,5 | — | %0,6 | 5 Tem 2023 |
26İzleyin | CVE-2025-24387İstismar yok | Missing CSRF protectionotrs · otrs · CWE-1275 | Orta6,5 | — | %0,2 | 10 Mar 2025 |
23İzleyin | CVE-2022-38386İstismar yok | IBM Cloud Pak for Security information disclosureibm · cloud pak for security · CWE-1275 | Orta5,9 | — | %0,5 | 1 May 2024 |
21İzleyin | CVE-2024-42212İstismar yok | HCL BigFix Compliance is affected by an improper or missing SameSite attributehcltech · bigfix compliance · CWE-1275 | Orta5,4 | — | %0,2 | 5 May 2025 |
17İzleyin | CVE-2024-30155İstismar yok | HCL SX is susceptible to cookie with Insecure, Improper, or Missing SameSite attribute vulnerabilityhcltech · hcl sx · CWE-1275 | Orta4,3 | — | %0,2 | 26 Mar 2025 |
16İzleyin | CVE-2026-55688İstismar yok | AsyncHttpClient: Cookie stored for an unrelated domain (cookie tossing) via ThreadSafeCookieStoreasynchttpclient · async-http-client · CWE-1275 | Orta4,0 | — | %0,3 | 1 Tem 2026 |
14İzleyin | CVE-2024-43173İstismar yok | IBM Concert information disclosureibm · concert · CWE-1275 | Düşük3,7 | — | %0,2 | 22 Eki 2024 |
- CVE-2024-661139İzleyin
Incorrect handling of SameSite cookies
KritikCVSS 9,8İstismar yokEPSS %1mozilla · firefox9 Tem 2024
- CVE-2025-5262835İzleyin
HCL AION is susceptible to Missing SameSite vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0hcltech · aion3 Şub 2026
- CVE-2023-5395734İzleyin
Kimai 1.30.10 SameSite Cookie Vulnerability Session Hijacking
YüksekCVSS 8,5İstismar yokEPSS %1kimai · kimai19 Ara 2025
- CVE-2026-4788930İzleyin
Spring Framework sameSite Attribute Dropped in JettyCoreServerHttpResponse
YüksekCVSS 7,5İstismar yokEPSS %0vmware · spring framework27 Ağu 2026
- CVE-2025-3613430İzleyin
IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure
YüksekCVSS 7,5İstismar yokEPSS %0ibm · sterling b2b integrator25 Kas 2025
- CVE-2026-10728027İzleyin
AsyncHttpClient: Cookie Domain attribute is not checked against the public suffix list, so a cookie can be set for co.uk
OrtaCVSS 6,9İstismar yokEPSS %0asynchttpclient · async-http-client5 gün önce
- CVE-2023-3067426İzleyin
Improper configuration in Samsung Internet prior to version 21.0.0.41 allows attacker to bypass SameSite Cookie.
OrtaCVSS 6,5İstismar yokEPSS %1samsung · internet5 Tem 2023
- CVE-2025-2438726İzleyin
Missing CSRF protection
OrtaCVSS 6,5İstismar yokEPSS %0otrs · otrs10 Mar 2025
- CVE-2022-3838623İzleyin
IBM Cloud Pak for Security information disclosure
OrtaCVSS 5,9İstismar yokEPSS %0ibm · cloud pak for security1 May 2024
- CVE-2024-4221221İzleyin
HCL BigFix Compliance is affected by an improper or missing SameSite attribute
OrtaCVSS 5,4İstismar yokEPSS %0hcltech · bigfix compliance5 May 2025
- CVE-2024-3015517İzleyin
HCL SX is susceptible to cookie with Insecure, Improper, or Missing SameSite attribute vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0hcltech · hcl sx26 Mar 2025
- CVE-2026-5568816İzleyin
AsyncHttpClient: Cookie stored for an unrelated domain (cookie tossing) via ThreadSafeCookieStore
OrtaCVSS 4,0İstismar yokEPSS %0asynchttpclient · async-http-client1 Tem 2026
- CVE-2024-4317314İzleyin
IBM Concert information disclosure
DüşükCVSS 3,7İstismar yokEPSS %0ibm · concert22 Eki 2024