CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NCVE-2021-27764
Medium (6.5) in hcltech bigfix webui. EPSS 0.6% chance of exploitation in the next 30 days.
Cookie without HTTPONLY flag set. NUMBER cookie(s) was set without Secure or HTTPOnly flags. The images show the cookie with the missing flag. (WebUI)
Severity
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-311, CWE-732, CWE-614
- Published
- Modified
- Record from
- the NVD, synced
Affected
- hcltech:bigfix_webui