VendorsRed Hatjboss_bpm_suite6.3
Vulnerabilities

Red Hat RedHat JBoss BPM Suite 6.3

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

1CVEs
CVE-2016-6344
Red Hat JBoss BPM Suite 6.3.x does not include the HTTPOnly flag in a Set-Cookie header for session cookies, which makes it easier for remote attackers to obtain potentially sensitive information via script access to the cookies.
Published 2016-09-07 · Modified
5.3EPSS 0.022