CVE-2009-2165

HIGH · CVSS 7.5 EPSS 1.40%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-06-22 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2009-2165

Severity

HIGH

CVSS

7.5

EPSS

1.40%

Original NVD Description

SerendipityNZ (aka SimpleBoxes) Serene Bach 2.20R and earlier, and 3.00 beta023 and earlier 3.x versions, uses a predictable session id, which makes it easier for remote attackers to hijack sessions via a modified id.