Search Vulnerabilities

HCL MyCloud was affected with Cookie Attribute Path Not Set

HCL Aftermarket EPC is vulnerable to attack as cookie appears to contain a session token, which may increase the risk associated with this issue

Pinpoint - Insecure Session Cookie Attributes in pinpointJwt

NocoDB: Refresh Token Cookie Set Without `Secure` and `SameSite` Flags

boruta-server sent sensitive session cookies without the Secure attribute

TwiN gatus OIDC Session Cookie oidc.go setSessionCookie missing secure attribute

HAX CMS Missing Secure Flag on Cookie

HCL iControl was affected by Missing Cookie Attributes vulnerability.

Apache Airflow: JWT cookie missing Secure flag in JWTRefreshMiddleware behind HTTPS-terminating proxy

Apache Shiro: Shiro's native session and rememberMe cookies do not have secure flag set by default

Eaton Intelligent Power Protector (IPP) uses an insecure cookie configuration, which could allow a network‑based attacker to intercept the cookie a...

IBM Maximo Application Suite was vulnerable to because Cookie ltpatoken2_<workspace_name> was not set with secure flag

In JetBrains Datalore before 2026

Use of unsecure cookies for GraphicalData web service and WebClient web app

Kentico Xperience <= 13.0.164 Cookie Security Configuration

IBM Jazz for Service Management is vulnerable to "filter" cookie not sent over SSL

HCL Unica Platform is affected by a Cookie without HTTPOnly Flag Set vulnerability

HCL AION is susceptible to Missing Secure Attribute in Encrypted Session (SSL) Cookie vulnerability

IBM Jazz for Service Management information disclosure

Insecure Cookie Flags Vulnerability in Digisol DG-GR6821AC Router