CWE-1463 · Other weaknesses
Insufficient Session Timeout Value
2CVEs
SortMost likely exploited
2 CVEs with CWE-1463 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-129173Stirling-Tools Stirling-PDF Participant Details Endpoint WorkflowParticipantController.java session timeoutStirling-Tools · Stirling-PDF · CVSS 5.3 · 2026-11-13 | 5.3 | 0.4% | 2026-11-13 |
| CVE-2026-118987CallBackery versions before 0.62.0 for Perl accept session cookies of any age sent in the X-Session-Cookie headerCallBackery · CVSS 5.3 · 2026-10-30 | 5.3 | 0.3% | 2026-10-30 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.