CWE-614

CWE-614 · 3 records · 0 with a public proof-of-concept

Records the NVD classes under CWE-614, highest CVSS first.

  1. LOW 3.1CVE-2026-662492026-10-01

    iControl is affected by a Missing Secure Attribute vulnerability, which could allow an attacker to intercept cookies transmitted over unencrypted HTTP connections, enabling the unauthorized extraction of sensitive information such as session identifiers.

    AI risk analysis on Exploit-DB.ai →

  2. LOW 2.2CVE-2026-565992026-10-01

    HCL BigFix Service Management is affected by an Insecure Cookie Attribute Configuration vulnerability, which could allow an attacker to exploit missing security attributes such as SameSite, HttpOnly, Secure, and restrictive Paths, enabling Cross-Site Request F…

    bigfix service management

    AI risk analysis on Exploit-DB.ai →

  3. UNSCOREDCVE-2026-1155192026-10-22

    Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated remote attacker to compromise user sessions if other security issues such as a cross-site scripting vulnerability or a man-in-the-middle attac…

    AI risk analysis on Exploit-DB.ai →