CVE-2022-44788: Maggioli Appalti & Contratti

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

An issue was discovered in Appalti & Contratti 9.12.2. It allows Session Fixation. When a user logs in providing a JSESSIONID cookie that is issued by the server at the first visit, the cookie value is not updated after a successful login.

Affected products

• Maggioli Appalti & Contratti: version 9.12.2 only

Published 2022-11-21. Last modified 2026-06-17.