Vulnerabilities > Softwareag > Connx

DATE CVE VULNERABILITY TITLE RISK
2022-06-14 CVE-2021-40649 Incorrect Permission Assignment for Critical Resource vulnerability in Softwareag Connx 6.2.0.1269
In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the HttpOnly flag set.
network
low complexity
softwareag CWE-732
6.4
6.4
2022-06-14 CVE-2021-40650 Missing Encryption of Sensitive Data vulnerability in Softwareag Connx 6.2.0.1269
In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the secure flag set. 		4.3
4.3