CWE-6 · Misconfiguration and Insecure Design
J2EE Misconfiguration: Insufficient Session-ID Length
2CVEs
SortMost likely exploited
2 CVEs with CWE-6 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2018-12538In Eclipse Jetty versions 9.4.0 through 9.4.8, when using the optional Jetty provided FileSessionDataStore for persistent storage of HttpSession details, it is possible for a mali…The Eclipse Foundation · Eclipse Jetty · 2018-06-22 | – | 2.6% | 2018-06-22 |
| CVE-2025-68968Double free vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect the input function.Huawei · HarmonyOS · CVSS 7.8 · 2026-01-14 | 7.8 | 0.1% | 2026-01-14 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.