Use of Persistent Cookies Containing Sensitive Information

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie headerCVE-2023-30861pallets · CVSS 7.5 · 1.3% likely

   The Pallets Project

2. A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications utilize persistent cookies where the session cookie attr…CVE-2021-27463Emerson · 0.9% likely

   Emerson

3. Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cookie Returned in Response Body OVE-20230524-0017.CVE-2025-27673Printerlogic · CVSS 9.1 · 0.5% likely

   Printerlogic

4. Session fixation via public cached pages and SESSION_SAVE_EVERY_REQUESTCVE-2026-35192djangoproject · CVSS 2.3 · 0.5% likely

   Djangoproject

5. Advantech ADAM-5630 Use of Persistent Cookies Containing Sensitive InformationCVE-2024-39275Advantech · CVSS 8 · 0.4% likely

   Advantech

6. HCL AION is susceptible to Missing Content-Security-PolicyCVE-2025-52633HCL · CVSS 3.1 · 0.2% likely

   HCL Software

7. Insecure Session Management vulnerability in SAP BusinessObjects Business Intelligence PlatformCVE-2026-24318SAP_SE · CVSS 4.2 · 0.2% likely

   SAP

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.