Skip to content
OpenAdvisories

Weakness (CWE)

CWE-539: Use of Persistent Cookies Containing Sensitive Information

Variant Incomplete

The web application uses persistent cookies, but the cookies contain sensitive information.

How to prevent it (1 mitigation)

  1. Architecture and Design

    Do not store sensitive information in persistent cookies.

Source: MITRE CWE-539

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.2
    CVE-2026-24318

    Insecure Session Management vulnerability in SAP BusinessObjects Business Intelligence Platform

    Due to an Insecure session management vulnerability in SAP Business Objects Business Intelligence Platform, an unauthenticated attacker could obtain valid session tokens and reuse them to gain unauthorized access to a victim�s session. If the application cont…

    SAP_SE SAP BusinessObjects Business Intelligence Platform