Skip to contentCWE-613 vulnerabilities
- nocodb, nocodb nocodb/nocodb +1 moreInsufficient Session Expiration in nocodb/nocodbCVE-2022-2064Fix available9.1 Critical
- bd synapsys, becton dickinson (bd) bd synapsys™ +1 moreBD Synapsys™ – Insufficient Session ExpirationCVE-2022-302775.7 Medium
- arubanetworks clearpass policy manager, hewlett packard enterprise (hpe) aruba clearpass policy manager +1 moreA remote authorization bypass vulnerability was discovered in Aruba ClearPass Policy Manager...CVE-2022-236698.8 High
- siemens desigo dxr2, desigo pxc3, desigo pxc4 +5 more +7 moreA vulnerability has been identified in Desigo DXR2 (All versions < V01.21.142.5-22), Desigo PXC3 ...CVE-2022-240429.1 Critical
- hcl commerce, hcltechsw hcl commerce +1 moreHCL Commerce is affected by an Insufficient Session Expiration vulnerability.CVE-2021-277514.4 Medium
- shopizerShopizer - Insufficient Session ExpirationCVE-2022-230638.8 High
- keycloak, redhat single sign-on +1 moreKeycloak insufficient session expirationCVE-2021-3461Fix available7.1 High
- snipe snipe/snipe-it, snipeitapp snipe-it +1 moreOld sessions are not blocked by the login enable function. in snipe/snipe-itCVE-2022-1155Fix available7.4 High
- surveykingSurveyKing v0.2.0 was discovered to retain users' session cookies after logout, allowing...CVE-2022-255906.5 Medium
- redhat 389 directory server, fedoraproject fedora, redhat enterprise linux +2 moreA vulnerability was found in the 389 Directory Server that allows expired passwords to access the...CVE-2022-0996Fix available6.5 Medium
- admidio, admidio admidio/admidio +1 moreInsufficient Session Expiration in admidio/admidioCVE-2022-0991Fix available8.2 High
- syliusInsufficient Session Expiration in SyliusCVE-2022-24743Fix available7.1 High
- runzero platform, shopware +1 moreInsufficient Session Expiration in shopwareCVE-2022-24744Fix available2.6 Low
- foxcpp maddyMaddy Mail Server does not implement account expiryCVE-2022-24732Fix available6.3 Medium
- ibm mq, mq appliance +1 moreIBM MQ Appliance 9.2 CD and 9.2 LTS does not invalidate session after logout which could allow an...CVE-2021-389865.6 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2021.2.1, editing a user account to change its password didn't...CVE-2022-243417.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2021.2, a logout action didn't remove a Remember Me cookie.CVE-2022-243325.3 Medium
- if-me ifmeifme - Insufficient Session ExpirationCVE-2021-259929.8 Critical
- schneider-electric evlink city evc1s22p4 firmware, evlink city evc1s7p4 firmware, evlink parking evf2 firmware +3 more +5 moreA CWE-614 Insufficient Session Expiration vulnerability exists that could allow an attacker to...CVE-2021-228209.8 Critical
- ibm security guardium insightsIBM Security Guardium Insights 3.0 could allow an authenticated user to obtain sensitive...CVE-2021-298462.2 Low
pterodactyl/panel PackagistInsufficient Session Expiration in Pterodactyl APIGHSA-7v3x-h7r2-34jvFix available6.0 Medium- mattermost boardsSession is not invalidated on server-side when user logged out of BoardsCVE-2021-378664.7 Medium
- daybydaycrm daybyday, bottelet daybydaycrm +1 moreDayByDay CRM - Insufficient Session Expiration after Password ChangeCVE-2022-221138.8 High
- samsung healthImproper session management vulnerability in Samsung Health prior to 6.20.1.005 prevents logging...CVE-2022-222832.8 Low
- shopwareInsufficient Session Expiration in shopwareCVE-2022-21652Fix available3.5 Low
- debiki talkyardTalkyard - Insufficient Session ExpirationCVE-2021-259819.8 Critical
- stormshield network securityAn issue was discovered in Stormshield Network Security (SNS) 4.2.2 through 4.2.7 (fixed in 4.2.8...CVE-2021-458857.5 High
- zyxel nbg6604 firmware, nbg6604 series firmware +1 moreAn insufficient session expiration vulnerability in the CGI program of the Zyxel NBG6604 firmware...CVE-2021-350347.4 High
- mahadiscom mahavitaranMahavitaran android application 7.50 and prior are affected by account takeover due to improper...CVE-2020-274169.8 Critical
- zulipIneffective expiration validation for invitation links in ZulipCVE-2021-437916.5 Medium
- dell emc streaming data platformDell EMC Streaming Data Platform versions before 1.3 contain an Insufficient Session Expiration...CVE-2021-363308.1 High
- business-dna solutions gmbh topeaseInsufficient Session Expiration in TopEaseCVE-2021-425458.1 High
- darwin factorFactorJS - Insufficient Session Expiration Leads to a Local Account TakeoverCVE-2021-259857.8 High
- arangodbArangoDB - Insufficient Session Expiration after Password ChangeCVE-2021-25940Fix available8.8 High
@cyyynthia/tokenize npmInsufficient Session Expiration in @cyyynthia/tokenizeGHSA-jcjx-c3j3-44prFix availableNo score- apostrophe, apostrophecms +1 moreApostrophe - Insufficient Session ExpirationCVE-2021-25979Fix available9.8 Critical
- jupyter jupyterhubincomplete logout in JupyterHubCVE-2021-41247Fix available3.5 Low
- cisco cbs250-16p-2g firmware, cbs250-16t-2g firmware, cbs250-24fp-4g firmware +207 more +209 moreCisco Small Business Series Switches Session Credentials Replay VulnerabilityCVE-2021-347398.1 High
- maharaIn Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, the account associated with a web...CVE-2021-408499.8 Critical
- ibm i2 ibaseIBM i2 iBase 8.9.13 and 9.0.0 could allow a local attacker to obtain sensitive information due to...CVE-2021-298684.0 Medium
- camaleon cms cms, tuzitio camaleon cms +1 moreCamaleon CMS - Insufficient Session Expiration after Password ChangeCVE-2021-25970Fix available8.8 High
- solarwinds pingdomSession Management VulnerabilityCVE-2021-352144.8 Medium
- orchardcore orchard core, users +1 moreOrchard Core CMS - Improper Session Termination after Password ChangeCVE-2021-259668.8 High
- ibm sterling file gatewayIBM Sterling File Gateway User Interface 2.2.0.0 through 6.1.1.0 does not invalidate session...CVE-2021-204736.3 Medium
- fortinet forticlientems, forticlient endpoint management server +1 moreAn insufficient session expiration vulnerability [CWE- 613] in FortiClientEMS versions 6.4.2 and...CVE-2021-24019Public exploit8.1 High
- wire wire-serverAccount takeover when having only access to a user's short lived token in wire-serverCVE-2021-411007.4 High
- icehrmThe IceHrm 30.0.0 OS website was found vulnerable to Session Management Issue. A signout from an...CVE-2021-388239.8 Critical
- bookingcore booking coreLaravel Booking System Booking Core 2.0 is vulnerable to Session Management. A password change at...CVE-2021-373339.8 Critical
- myfwc fish \| hunt flAn insufficient session expiration vulnerability exists in the "Fish | Hunt FL" iOS app version 3...CVE-2021-339827.5 High
- fortinet fortisandboxAn insufficient session expiration vulnerability in FortiSandbox versions 3.2.1 and below may...CVE-2020-290125.6 Medium
- Show moreLoading…