Vulnerabilities > Softwareag > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-12-07 CVE-2023-6578 Unspecified vulnerability in Softwareag Webmethods
A vulnerability classified as critical has been found in Software AG WebMethods 10.11.x/10.15.x.
network
low complexity
softwareag
6.5
2022-06-14 CVE-2021-40649 Incorrect Permission Assignment for Critical Resource vulnerability in Softwareag Connx 6.2.0.1269
In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the HttpOnly flag set.
network
low complexity
softwareag CWE-732
6.5
2022-06-14 CVE-2021-40650 Missing Encryption of Sensitive Data vulnerability in Softwareag Connx 6.2.0.1269
In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the secure flag set.
network
low complexity
softwareag CWE-311
6.5