565 matches found
CVE-2001-1513
Macromedia JRun 3.0 and 3.1 allows remote attackers to obtain duplicate active user session IDs and perform actions as other users via a URL request for the web application directory without the trailing '/' slash, as demonstrated using ctx...
7.5CVSS6.6AI score0.01532EPSS
SaveExploits0References3
CVE-2001-0962
IBM WebSphere Application Server 3.02 through 3.53 uses predictable session IDs for cookies, which allows remote attackers to gain privileges of WebSphere users via brute force guessing...
7.5CVSS6.8AI score0.01588EPSS
SaveExploits0References4
CVE-1999-0699
The Bluestone Sapphire web server allows session hijacking via easily guessable session IDs...
7.5CVSS6.6AI score0.01144EPSS
SaveExploits0References1
20