Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:jboss_bpm_suite:6.3:*:*:*:*:*:*:*

part: a version: 6.3 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductJboss Bpm Suite (fe7d6755-18cf-5cac-8d7f-c9328b22aa60)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/jboss-developer/jboss-brms-quickstarts purl2cpe 2026-06-01 10:12:53.859543

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-6344 vulnerable 2026-06-08 05:07:59.658220 Details available
Red Hat JBoss BPM Suite 6.3.x does not include the HTTPOnly flag in a Set-Cookie header for session cookies, which makes it easier for remote attackers to obtain potentially sensitive information via script access to the cookies.
Published: 2016-09-07T18:00:00.000Z
Updated: 2024-08-06T01:29:19.440Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.