Security Bulletin: IBM Jazz for Service Management is vulnerable to "cookiesEnabled" cookie not sent over SSL

Summary IBM Jazz for Service Management is vulnerable to "cookiesEnabled" cookie not sent over SSL CVE-2025-36011. Vulnerability Details CVEID:CVE-2025-36011 DESCRIPTION: IBM Jazz for Service Management does not set the secure attribute on authorization tokens or session cookies. Attackers may be...

PT-2020-8005

Name of the Vulnerable Software and Affected Versions: Mattermost Server versions prior to 3.0.0 Description: The issue arises because the software does not ensure that a cookie is used over SSL. This could potentially expose sensitive information. Recommendations: For versions prior to 3.0.0,...

SIMATIC S7-300/S7-400 CPU family information disclosure vulnerability

Siemens SIMATIC S7-300/S7-400 CPU families are used to provide discrete and continuous control in industrial environments such as manufacturing, food and beverage, and global chemical industries. An information disclosure vulnerability exists in the SIMATIC S7-300/S7-400 CPU family. Due to the...