CWE-539

7 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 1High 2Medium 2Low 2Not scored 0

CVEs per yearBy the year they were published

CVE-2026-35192
Session fixation via public cached pages and SESSION_SAVE_EVERY_REQUEST
djangoproject · Django
Low2.3
CVE-2026-24318
Insecure Session Management vulnerability in SAP BusinessObjects Business Intelligence Platform
SAP_SE · SAP BusinessObjects Business Intelligence Platform
Medium4.2
CVE-2025-52633
HCL AION is susceptible to Missing Content-Security-Policy
HCL · AION
Low3.1
CVE-2025-27673
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Cookie Returned in Response Body OVE-20230524-0017.
Product not named
Critical9.1
CVE-2024-39275
Advantech ADAM-5630 Use of Persistent Cookies Containing Sensitive Information
Advantech · ADAM-5630
High8.5
CVE-2023-30861
Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header
pallets · flask
High7.5
CVE-2021-27463
A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications utilize persistent cookies where the…
Emerson Rosemount X-STREAM Gas Analyzer
Medium5.3