3 matches found
CVE-2020-14247
HCL OneTest Performance V9.5, V10.0, V10.1 contains an inadequate session timeout, which could allow an attacker time to guess and use a valid session ID...
6.5CVSS6.6AI score0.00669EPSS
SaveExploits0References1
CVE-2017-14332
Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to hijack sessions by determining SessionID values...
8.1CVSS5.8AI score0.01049EPSS
SaveExploits0References1
Multiple Huawei Server Design Vulnerabilities
Huawei Tecal RH1288 V2 and others are servers from Huawei, a Chinese company. A security vulnerability exists in several Huawei servers. An attacker can exploit the vulnerability by guessing the session ID used by another user to access the system with a fake identity...
7.5CVSS6.7AI score0.00773EPSS
SaveExploits0References1
20