CVE-2021-40650: Softwareag Connx

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the secure flag set.

Affected products

• Softwareag Connx: version 6.2.0.1269 only

Published 2022-06-14. Last modified 2026-07-09.