CVE-2014-8391: Sendio

Medium severity, CVSS 4.0. EPSS: 5.4% chance of exploitation in the next 30 days.

The Web interface in Sendio before 7.2.4 does not properly handle sessions, which allows remote authenticated users to obtain sensitive information from other users' sessions via a large number of requests.

Affected products

• Sendio Sendio: up to and including 7.2.3

Published 2015-06-02. Last modified 2026-06-17.