2 matches found
PT-2014-3244
Name of the Vulnerable Software and Affected Versions OpenText Exceed OnDemand EoD version 8 Description The issue allows remote attackers to perform session fixation attacks by sniffing the network, as the session ID is transmitted in cleartext. Recommendations For version 8, consider implementi...
6.4CVSS0.01184EPSS
SaveExploits0References2
CVE-2013-6994: Undefined Security Weakness
OpenText Exceed OnDemand EoD 8 transmits the session ID in cleartext, which allows remote attackers to perform session fixation attacks by sniffing the network...
6.4CVSS5.9AI score0.01184EPSS
SaveExploits0References2
20