CWE-539 · Information Disclosure
Use of Persistent Cookies Containing Sensitive Information
7CVEs
SortMost likely exploited
7 CVEs with CWE-539 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-30861Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie headerpallets · flask · CVSS 7.5 · 2023-05-02 | 7.5 | 1.3% | 2023-05-02 |
| CVE-2021-27463A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications utilize persistent cookies where the session cookie attr…Emerson · Emerson Rosemount X-STREAM Gas Analyzer · 2021-05-20 | – | 0.9% | 2021-05-20 |
| CVE-2025-27673Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cookie Returned in Response Body OVE-20230524-0017.Printerlogic · Vasion Print · CVSS 9.1 · 2025-03-05 | 9.1 | 0.5% | 2025-03-05 |
| CVE-2026-35192Session fixation via public cached pages and SESSION_SAVE_EVERY_REQUESTdjangoproject · Django · CVSS 2.3 · 2026-05-05 | 2.3 | 0.5% | 2026-05-05 |
| CVE-2024-39275Advantech ADAM-5630 Use of Persistent Cookies Containing Sensitive InformationAdvantech · ADAM-5630 · CVSS 8 · 2024-09-27 | 8.0 | 0.4% | 2024-09-27 |
| CVE-2025-52633HCL AION is susceptible to Missing Content-Security-PolicyHCL · AION · CVSS 3.1 · 2026-02-03 | 3.1 | 0.2% | 2026-02-03 |
| CVE-2026-24318Insecure Session Management vulnerability in SAP BusinessObjects Business Intelligence PlatformSAP_SE · SAP BusinessObjects Business Intelligence Platform · CVSS 4.2 · 2026-04-14 | 4.2 | 0.2% | 2026-04-14 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.