Skip to contentCWE-613 vulnerabilities
- ibm infosphere information serverIBM InfoSphere Information Server session fixationCVE-2024-223516.3 Medium
- meon kyc solutionsImproper Authentication Vulnerability in Meon KYC solutionsCVE-2025-426028.2 High
- ibm sterling connect:direct web services, sterling connect direct web services +1 moreIBM Sterling Connect:Direct Web Services session fixationCVE-2024-456516.3 Medium
- nagios network analyzerAn access control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows deleted users to...CVE-2025-280597.5 High
- ibm robotic process automation, robotic process automation for cloud pak +1 moreIBM Robotic Process Automation session fixationCVE-2024-498256.3 Medium
- apache rollerApache Roller: Insufficient Session Expiration on Password ChangeCVE-2025-248592.1 Low
- mattermost, mattermost mobile +1 moreUnauthorized Notification Exposure in Mobile App Under Specific ConditionsCVE-2025-305162.0 Low
- progress software corporation sitefinityInsufficient Session Expiration vulnerability in Progress Software Corporation Sitefinity under...CVE-2025-19687.7 High
- ibm jazz reporting serviceIBM Jazz Reporting Service insufficient session expirationCVE-2024-250516.6 Medium
- nagios network analyzerA session management flaw in Nagios Network Analyzer 2024R1.0.3 allows an attacker to reuse...CVE-2025-281324.6 Medium
- checkmkSession logout can be overwritten by long lasting requestCVE-2025-25962.3 Low
- No product listedIncorrect cookie session handling in WombatDialer before 25.02 results in the full session...CVE-2024-570565.4 Medium
- gitlabInsufficient Session Expiration in GitLabCVE-2025-1198Fix available4.2 Medium
- nexryai concordeConcorde not removing authentication tokens after logging outCVE-2025-249739.4 Critical
- misskeyMisskey allows token to remain valid in cookie after signing outCVE-2025-248968.1 High
- siemens simatic pcs neo v4.0, simatic pcs neo v4.1, simatic pcs neo v5.0 +4 more +6 moreA vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC PCS neo V4.1 ...CVE-2024-453868.7 High
- f5 nginx, debian linux, f5 nginx open source +1 more +3 moreTLS Session Resumption VulnerabilityCVE-2025-23419Public exploitFix available5.3 Medium
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.3, macOS...CVE-2025-241065.5 Medium
- apache software foundation airflow fab provider, apache apache-airflow-providers-fab +1 moreApache Airflow Fab Provider: Application does not invalidate session after password change via Airflow cliCVE-2024-45033Fix available8.1 High
- progress sitefinity: Insufficient Session Expiration vulnerability in Progress Sitefinity allows : Session Fixation...CVE-2024-116276.8 Medium
- optimizely configured commerceAn issue was discovered in Optimizely Configured Commerce before 5.2.2408. A medium-severity...CVE-2025-223867.3 High
- acronis cyber protect 16Missing session invalidation after user deletion. The following products are affected: Acronis...CVE-2024-564136.1 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2024.12 access tokens were not revoked after removing user rolesCVE-2024-563516.3 Medium
- kanboardInsufficient session invalidation in KanboardCVE-2024-556036.5 Medium
TShock NuGetTShock Security Escalation ExploitGHSA-hvm9-wc8j-mgrcFix available8.9 High- invoiceplaneInvoicePlane view session expirationCVE-2024-126676.3 Medium
- gitlabInsufficient Session Expiration in GitLabCVE-2024-11668Fix available4.2 Medium
- ibm big sql, db2 big sql on cloud pak for data, watson query for cloud pak for data +1 more +3 moreIBM Watson Query on Cloud Pak for Data and IBM Db2 Big SQL on Cloud Pak for Data information disclosureCVE-2024-351604.3 Medium
- apereo cas, cas server, central authentication service +2 moreApereo CAS login session expirationCVE-2024-112086.3 Medium
- jenkins openid, openid connect authentication, jenkins project openid connect authentication plugin +2 moreSession fixation vulnerability in Jenkins OpenId Connect Authentication PluginCVE-2024-52553Fix available8.8 High
- siemens sinec insA vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected...CVE-2024-468926.9 Medium
- lemonldap-ngAn issue was discovered in LemonLDAP::NG before 2.0.12. There is a missing expiration check in...CVE-2021-35473Fix available9.1 Critical
- amazon data.alldata.all does not invalidate authentication token upon user logoutCVE-2024-523115.3 Medium
- umbraco cms, umbraco-cms +1 moreUmbraco CMS logout page displayed before session expirationCVE-2024-48926Fix available4.2 Medium
- apache cloudstackApache CloudStack: Incomplete session invalidation on web interface logoutCVE-2024-454626.3 Medium
- sbond watcharrAn issue in sbondCo Watcharr v.1.43.0 allows a remote attacker to execute arbitrary code and...CVE-2024-48827Public exploit8.8 High
- No product listedIoT Haat Smart Plug IH-IN-16A-S IH-IN-16A-S v5.16.1 suffers from Insufficient Session Expiration....CVE-2024-460406.5 Medium
- microchip timeprovider 4100, timeprovider 4100 firmware +1 moreSession token fixation in TimeProvider 4100CVE-2024-436858.7 High
- drupal persistent login, persistent login project login +1 morePersistent Login - Moderately critical - Access bypass - SA-CONTRIB-2024-044CVE-2024-13280Fix available9.8 Critical
- hcl software nomad server on domino, hcltech hcl nomad +1 moreAn insufficient session timeout vulnerability affects HCL Nomad server on DominoCVE-2024-235865.3 Medium
- circutor q-smt, q smt, q-smt firmware +2 moreInsufficient Session Expiration vulnerability on CIRCUTOR Q-SMTCVE-2024-888810.0 Critical
- ibm aspera sharesIBM Aspera Shares session fixationCVE-2024-383156.3 Medium
- siemens sinema remote connect clientA vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2)....CVE-2024-320065.3 Medium
- mage mage-aiMage AI allows deleted users to use the terminal server with admin access, leading to remote code executionCVE-2024-451877.1 High
- octopus serverIn affected versions of Octopus Server OIDC cookies were using the wrong expiration time which...CVE-2024-79982.6 Low
- f5 big-ip next central managerBIG-IP Next Central Manager vulnerabilityCVE-2024-398098.9 High
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreAn insufficient session expiration vulnerability [CWE-613] vulnerability in FortiOS 7.2.5 and...CVE-2022-458623.5 Low
- ibm cloud pak for security, qradar suite software, qradar suite +2 moreIBM Cloud Pak for Security session fixationCVE-2022-383824.7 Medium
- apache software foundation airflow providers fab, apache apache-airflow-providers-fab +1 moreApache Airflow Providers FAB: FAB provider 1.2.1 and 1.2.0 did not let user to logout for AirflowCVE-2024-42447Fix available9.8 Critical
- ibm aspera orchestratorIBM Aspera Orchestrator session fixationCVE-2023-262885.5 Medium
- Show moreLoading…