2 matches found
CVE-2008-7295
Microsoft Internet Explorer cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security HSTS...
5.8CVSS6.8AI score0.05105EPSS
SaveExploits0References1
IBM DataPower Gateway Information Disclosure Vulnerability (CNVD-2018-26363)
IBM DataPower Gateways is a suite of security and integration platforms from IBM USA designed specifically for mobile, cloud, application programming interfaces APIs, web, service-oriented architecture SOA, B2B, and cloud workloads that protects, integrates, and optimizes access across channels...
5.9CVSS5.6AI score0.02281EPSS
SaveExploits0References1
20