Advisories · Weakness
CWE-539.
Every Advisory and CVE whose sources give the weakness CWE-539, newest first.
- CVSS 2.3 Low
Django Uses Persistent Cookies Containing Sensitive Information
- CWE-539
>=5.2, <5.2.14 || >=6.0, <6.0.5 · fixed in 5.2.14, 6.0.5
GHSA-7h2m-m8vj-598h · CVE-2026-35192 - CVSS 4.2 Medium
Insecure Session Management vulnerability in SAP BusinessObjects Business Intelligence Platform
- SAP_SE SAP BusinessObjects Business Intelligence Platform
- CWE-539
- CVSS 3.1 Low
HCL AION is susceptible to Missing Content-Security-Policy
- HCL AION
- CWE-539
- CVSS 9.1 CriticalCritical · CVSS 9+
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cookie Returned in Response Body OVE-20230524-0017.
- CWE-539
- CVSS 8.5 High
Advantech ADAM-5630 Use of Persistent Cookies Containing Sensitive Information
- Advantech ADAM-5630
- CWE-539
- CVSS 7.5 High
Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header
- CWE-539
<2.2.5 || >=2.3.0, <2.3.2 · fixed in 2.2.5, 2.3.2
GHSA-m2qf-hxjv-5gpq · CVE-2023-30861 -
A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer.
- Emerson Rosemount X-STREAM Gas Analyzer
- CWE-539