CWE-256

High likelihood

Plaintext Storage of a Password

Parent: CWE-522 - Insufficiently Protected Credentials

The product stores a password in plaintext within resources such as memory or files.

215 vulnerabilities with CWE-256
CVE-2026-21417 HIGH
Dell CloudBoost Virtual Appliance <19.14.0.0 - Privilege Escalation
CVSS 7.0
CVE-2025-36335 MEDIUM
Vulnerabilities found
CVSS 6.2
CVE-2025-15624 HIGH
Plaintext Storage of a Password in Sparx Pro Cloud Server.
CVSS 7.5
CVE-2025-36258 HIGH
IBM InfoSphere Information Server is vulnerable due to plaintext storage of a password
CVSS 7.1
CVE-2025-36425 MEDIUM
IBM Db2 11.5.0-11.5.9/12.1.0-12.1.3 - Info Disclosure
CVSS 5.3
CVE-2025-12680 MEDIUM
Brocade SANnav <2.4.0b - Info Disclosure
CVSS 4.9
CVE-2025-25051 MEDIUM
OT Device Crypto - Sensitive Data Decryption and Impersonation
CVSS 6.1
CVE-2025-15113 CRITICAL
Ksenia Security Lares 4.0 Home Automation <1.6 - Code Injection
CVSS 9.3
CVE-2025-15128 MEDIUM
ZKTeco BioTime <9.0.3/9.0.4/9.5.2 - Info Disclosure
CVSS 5.3
CVE-2025-66910 MEDIUM
Turms Server v0.10.0-SNAPSHOT - Info Disclosure
CVSS 6.0
CVE-2025-65009 HIGH
WODESYS WD-R608U WDR28 WDR122B V2.0 - Plaintext Password Storage in Configuration File
CVE-2025-14183 MEDIUM
SGAI Space1 NAS N1211DS <1.0.915 - Info Disclosure
CVSS 4.3
CVE-2025-56527 HIGH
Kotaemon < 0.11.0 - Plaintext Password Storage in LocalStorage
CVSS 7.5
CVE-2025-13221 MEDIUM
Intelbras UnniTI 24.07.11 - Info Disclosure
CVSS 5.3
CVE-2025-13187 MEDIUM
Intelbras ICIP 2.0.20 - Info Disclosure
CVSS 5.3
CVE-2025-9982 HIGH
QuickCMS 6.8 - Plaintext Password Storage in Configuration File
CVSS 7.5
CVE-2025-46366 MEDIUM
Dell CloudLink <8.1.1 - Privilege Escalation
CVSS 6.7
CVE-2025-11193 MEDIUM
Lenovo Tab M11 TB330FU TB330XU - Plaintext Storage of a Password
CVSS 5.5
CVE-2025-36002 MEDIUM
IBM Sterling B2B Integrator & File Gateway <6.2.1 - Info Disclosure
CVSS 5.5
CVE-2025-61680 MEDIUM
Minecraft RCON Terminal <2.0.6 - Info Disclosure
CVE-2025-34210 MEDIUM
Vasion Print Virtual Appliance Host & Application - Info Disclosure
CVSS 5.5
CVE-2025-43938 MEDIUM
Dell PowerProtect Data Manager <19.20 - Info Disclosure
CVSS 5.0
CVE-2025-46809 MEDIUM
SUSE Manager Proxy and Server 4.3 - Plaintext Password Storage in Log Files
CVSS 5.7
CVE-2025-45702 MEDIUM
SoftPerfect Pty Ltd Connection Quality Monitor <1.1 - Info Disclosure
CVSS 6.5
CVE-2025-52164 HIGH
Software GmbH Agorum core <11.10.1 - Info Disclosure
CVSS 8.2
Details
Vulnerabilities 215
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits