CWE-319

High likelihood

Cleartext Transmission of Sensitive Information

Parent: CWE-311 - Missing Encryption of Sensitive Data

The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

898 vulnerabilities with CWE-319
CVE-2022-39269 CRITICAL
PJSIP 2.11-2.13 - Cleartext Transmission of Sensitive Information via SRTP Restart
CVSS 9.1
CVE-2022-32227 MEDIUM
Rocket.Chat < 4.7.5 - Cleartext Transmission of Sensitive OAuth Tokens
CVSS 6.5
CVE-2022-38846 MEDIUM
EspoCRM 7.1.8 - Cleartext Transmission of Sensitive Information via Missing Secure Flag
CVSS 5.9
CVE-2022-30312 MEDIUM
Honeywell Trend IQ412, IQ411, IQ422, IQ4NC, IQ4E Firmware - Cleartext Sensitive Data Transmission
CVSS 6.5
CVE-2022-2083 HIGH
Simple Single Sign On < 4.1.0 - Cleartext Transmission of OAuth Client Secret
CVSS 7.5
CVE-2022-2485 CRITICAL
AutomationDirect Stride Field I/O < 8.11.3.0 Cleartext Sensitive Info in Login Response
CVSS 9.6
CVE-2022-2005 HIGH
AutomationDirect C-more EA9 Firmware < 6.73 - Cleartext Transmission of Sensitive Information
CVSS 7.5
CVE-2022-2003 HIGH
AutomationDirect DirectLOGIC D0-06 Series < 2.72 - Cleartext Password Exposure via Serial Port
CVSS 7.7
CVE-2022-36200 HIGH
FiberHome VDSL2 Modem HG150-Ub_V3.0 - Info Disclosure
CVSS 7.5
CVE-2022-32857 MEDIUM
iPadOS < 15.6 - Cleartext Transmission of Sensitive Information
CVSS 4.3
CVE-2022-2338 MEDIUM
Softing Secure Integration Server V1.22 - Auth Bypass
CVSS 5.7
CVE-2022-20243 MEDIUM
Android 13 - Local Information Disclosure of Sensitive Browsing Data via Core Utilities Log
CVSS 4.4
CVE-2022-32245 HIGH
SAP BusinessObjects BI Platform 420, 430 - Cleartext Transmission of Sensitive Info
CVSS 8.2
CVE-2022-33724 LOW
Samsung Dialer <SMR Aug-2022 Release 1 - Info Disclosure
CVSS 3.3
CVE-2022-27619 MEDIUM
Synology Note Station < 2.2.2-609 - Cleartext Transmission of Sensitive Information in Authentication Management
CVSS 6.8
CVE-2022-31204 HIGH
Omron CS/CJ/CP PLCs - Info Disclosure
CVSS 7.5
CVE-2022-28861 MEDIUM
Citilog 8.0 - Cleartext Transmission of FTP Credentials via HTTP Traffic
CVSS 5.9
CVE-2022-34804 MEDIUM
Jenkins OpsGenie Plugin < 1.9 - Cleartext Transmission of Sensitive Information via Configuration Forms
CVSS 4.3
CVE-2022-34801 MEDIUM
Jenkins Build Notifications Plugin < 1.5.0 - Cleartext Transmission of Sensitive Tokens
CVSS 4.3
CVE-2022-29519 HIGH
Yokogawa STARDOM FCN and FCJ Firmware R1.01-R4.31 - Cleartext Transmission of Sensitive Information
CVSS 7.5
CVE-2022-21829 CRITICAL
Concrete CMS <8.5.8 and 9.0.0-9.0.2 - Remote Code Execution via Insecure HTTP Zip Download
CVSS 9.8
CVE-2022-1524 HIGH
illumina local_run_manager < 3.1 - Cleartext Transmission of Sensitive Information
CVSS 7.4
CVE-2022-21184 MEDIUM
atvise 3.5.4-3.7 - Cleartext Transmission of Sensitive Information via License Registration
CVSS 5.9
CVE-2022-31046 MEDIUM
TYPO3 <7.6.57 ELTS, <8.7.47 ELTS, <9.5.34 ELTS, <10.4.29, <11.5.11 ...
CVSS 4.3
CVE-2022-25805 MEDIUM
IGEL Universal Management Suite 6.07.100 - Cleartext LDAP Credential Transmission
CVSS 6.5
Details
Vulnerabilities 898
Exploit Likelihood High