Patchfirst: CVEs linked to T1563 Remote Service Session Hijackinghttps://patchfirst.co/technique/T1563/New and newly exploited CVEs that lead to ATT&CK T1563 Remote Service Session Hijacking, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMTCVE-2020-5290: session fixation in rCTFhttps://patchfirst.co/cve/CVE-2020-5290/CVE-2020-5290Wed, 01 Apr 2020 00:00:00 GMTredpwn · rctf. Not in CISA KEV. EPSS 0.8% (higher than 57% of CVEs). CVSS 6.5 MEDIUM. ATT&CK: T1189 Drive-by Compromise; T1563 Remote Service Session Hijacking. Priority 16.0 of 100.T1189T1563CVE-2019-16782: Possible Information Leak / Session Hijack Vulnerability in Rackhttps://patchfirst.co/cve/CVE-2019-16782/CVE-2019-16782Wed, 18 Dec 2019 00:00:00 GMTrack · rack. Not in CISA KEV. EPSS 3.7% (higher than 89.7% of CVEs). CVSS 6.3 MEDIUM. ATT&CK: T1110 Brute Force; T1563 Remote Service Session Hijacking. Priority 22.4 of 100.T1110T1563CVE-2019-18573: The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a…https://patchfirst.co/cve/CVE-2019-18573/CVE-2019-18573Wed, 18 Dec 2019 00:00:00 GMTDell · RSA Identity Governance & Lifecycle. Not in CISA KEV. EPSS 1.0% (higher than 62.4% of CVEs). CVSS 8.7 HIGH. ATT&CK: T1563 Remote Service Session Hijacking. Priority 18.6 of 100.T1563CVE-2019-3790: Ops Manager uaa client issues tokens after refresh token expirationhttps://patchfirst.co/cve/CVE-2019-3790/CVE-2019-3790Thu, 06 Jun 2019 00:00:00 GMTPivotal · Pivotal Ops Manager. Not in CISA KEV. EPSS 0.7% (higher than 51.2% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1078 Valid Accounts; T1563 Remote Service Session Hijacking. Priority 14.5 of 100.T1078T1563CVE-2019-1724: Cisco Small Business RV320 and RV325 Routers Session Hijacking Vulnerabilityhttps://patchfirst.co/cve/CVE-2019-1724/CVE-2019-1724Fri, 03 May 2019 00:00:00 GMTCisco · Cisco Small Business RV Series Router Firmware. Not in CISA KEV. EPSS 1.5% (higher than 73.4% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1563 Remote Service Session Hijacking. Priority 20.8 of 100.T1563CVE-2019-3784: Cloud Foundry Stratos contains a Session Collision Vulnerabilityhttps://patchfirst.co/cve/CVE-2019-3784/CVE-2019-3784Thu, 07 Mar 2019 00:00:00 GMTCloud Foundry · Stratos. Not in CISA KEV. EPSS 1.1% (higher than 64.5% of CVEs). CVSS 8.2 HIGH. ATT&CK: T1563 Remote Service Session Hijacking. Priority 18.6 of 100.T1563CVE-2018-8852: Philips e-Alert Unit (non-medical device), Version R2.1 and priorhttps://patchfirst.co/cve/CVE-2018-8852/CVE-2018-8852Wed, 26 Sep 2018 00:00:00 GMTPhilips · e-Alert Unit (non-medical device). Not in CISA KEV. EPSS 1.9% (higher than 79.6% of CVEs). ATT&CK: T1563 Remote Service Session Hijacking. Priority 15.9 of 100.T1563