CWE-539

7 CVEs classified under CWE-539. Browse by severity and year.

Top CVEs for CWE-539
CVESeverityScorePublishedSummary
CVE-2025-27673Critical9.12025-03-05Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cookie Returned in Response Body OVE-20230524-0017.
CVE-2024-39275High8.02024-09-27Cookies of authenticated Advantech ADAM-5630 users remain as active valid cookies when a session is closed. Forging requests with a legitimate cookie, even if…
CVE-2023-30861High7.52023-05-02Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be…
CVE-2026-35192Medium6.52026-05-05An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. Response headers do not vary on cookies if a session is not modified, but `SESSION_SAVE_EVER…
CVE-2021-27463Medium5.32021-05-20A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications utilize persistent cookies where the…
CVE-2026-24318Medium4.22026-04-14Due to an Insecure session management vulnerability in SAP Business Objects Business Intelligence Platform, an unauthenticated attacker could obtain valid sess…
CVE-2025-52633Low3.12026-02-03HCL AION is affected by a Permanent Cookie Containing Sensitive Session Information vulnerability. It is storing sensitive session data in persistent cookies m…
All CVEs classified under CWE-539 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-35192Medium6.52026-05-05An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14. Response headers do not vary on cookies if a session is not modified, but `SESSION_SAVE_EVER…
CVE-2026-24318Medium4.22026-04-14Due to an Insecure session management vulnerability in SAP Business Objects Business Intelligence Platform, an unauthenticated attacker could obtain valid sess…
CVE-2025-52633Low3.12026-02-03HCL AION is affected by a Permanent Cookie Containing Sensitive Session Information vulnerability. It is storing sensitive session data in persistent cookies m…
CVE-2025-27673Critical9.12025-03-05Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cookie Returned in Response Body OVE-20230524-0017.
CVE-2024-39275High8.02024-09-27Cookies of authenticated Advantech ADAM-5630 users remain as active valid cookies when a session is closed. Forging requests with a legitimate cookie, even if…
CVE-2023-30861High7.52023-05-02Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be…
CVE-2021-27463Medium5.32021-05-20A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications utilize persistent cookies where the…