Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Softwareag records in CISA KEVNo Softwareag vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 30
In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the secure flag set.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00784 · Published 2022-06-14 · No fix listed CWE-311
Priority LOW 30
In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the HttpOnly flag set.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00834 · Published 2022-06-14 · No fix listed CWE-732
