Softwareag: community verdicts

2 notable / known-exploited Softwareag CVEs the community has triaged.

ⓘ Not an exhaustive list: we focus on the findings that matter (exploited / notable). For every Softwareag CVE, see NVD ↗.

CVE-2021-40649MED 6.5EPSS 1%
In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the HttpOnly flag set.
CVE-2021-40650MED 6.5EPSS 1%
In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the secure flag set.