Contact Us

Log in

Vulnerabilities / Cookie without HttpOnly flag

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Severity
low
CWE NameCookie without HttpOnly flag
CWE IDCWE-16
CWE Score3.1
Compliance
OWASP TOP10 -> A7
PCI-DSS -> 6.5.10
HIPAA -> 164.306(a)
CVSS3.0
Attack VectorNetwork
Attack ComplexityHigh
Privileges RequiredNone
User InteractionRequired
ScopeUnchanged
Confidentiality ImpactLow
Integrity ImpactNone
Availability ImpactNone
Cookie without HttpOnly flag