CWE-319

High likelihood

Cleartext Transmission of Sensitive Information

Parent: CWE-311 - Missing Encryption of Sensitive Data

The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

899 vulnerabilities with CWE-319
CVE-2021-3473 MEDIUM
Lenovo XClarity Controller - Cleartext Transmission of Sensitive Information in FFDC Service Log
CVSS 4.5
CVE-2021-27194 HIGH
Netop Vision Pro <= 9.7.1 - Unauthenticated Cleartext Transmission of Sensitive Information
CVSS 8.8
CVE-2021-21387 HIGH
Wrongthink <2.3.0 - Info Disclosure
CVSS 8.1
CVE-2021-3417 MEDIUM
Lenovo XClarity Orchestrator < 1.2.2 - Cleartext Transmission of Sensitive Information in FFDC Service Log
CVSS 4.9
CVE-2021-26565 HIGH
Synology DiskStation Manager < 6.2.3-25426-3 - Cleartext Transmission of Sensitive Information via HTTP Session
CVSS 8.3
CVE-2021-26564 HIGH
Synology DiskStation Manager < 6.2.3-25426-3 - Cleartext Transmission of Sensitive Information via synorelayd
CVSS 8.3
CVE-2021-26560 CRITICAL
Synology DiskStation Manager < 6.2.3-25426-3 - Cleartext Transmission of Sensitive Information via synoagentregisterd
CVSS 9.0
CVE-2021-22703 HIGH
Schneider Electric PowerLogic ION and PM8000 Firmware - Cleartext Transmission of Sensitive Information
CVSS 7.5
CVE-2021-22702 HIGH
PowerLogic ION/PM8000 Cleartext Transmission of Sensitive Information via Telnet
CVSS 7.5
CVE-2021-27209 HIGH
TP-Link Archer C5v 1.7_181221 - Cleartext Transmission of Sensitive Information via Base64-Encoded Credentials
CVSS 7.1
CVE-2021-20409 MEDIUM
IBM Security Verify Information Queue <1.0.7 - Info Disclosure
CVSS 5.9
CVE-2021-20335 MEDIUM
MongoDB Ops Manager <4.2.24-4.4.12 - Info Disclosure
CVSS 6.7
CVE-2021-20623 CRITICAL
Panasonic Video Insight VMS < 7.8 - Remote Code Execution
CVSS 9.8
CVE-2021-21270 MEDIUM
OctopusDSC <4.0.1002 - Info Disclosure
CVSS 6.2
CVE-2020-36917 HIGH
iDS6 DSSPro Digital Signage System 6.2 - Info Disclosure
CVSS 7.5
CVE-2020-36914 HIGH
QiHang Media Web Digital Signage 3.0.9 - Info Disclosure
CVSS 7.5
CVE-2020-4497 MEDIUM
IBM Spectrum Protect Plus 10.1.0-10.1.12 - Cleartext Transmission of Sensitive Information
CVSS 6.8
CVE-2020-9420 MEDIUM
Arcadyan VRV9506JAC23 Firmware - Cleartext Transmission of Sensitive Information via Web Administrative Dashboard Login
CVSS 6.5
CVE-2020-4970 MEDIUM
IBM Security Identity Governance and Intelligence 5.2.4-5.2.6 - Cleartext Transmission of Sensitive Information
CVSS 5.9
CVE-2020-25178 HIGH
Schneider-electric Easergy T300 Firmware - Cleartext Transmission
CVSS 7.5
CVE-2020-4152 MEDIUM
IBM QRadar Network Security 5.4.0-5.4.0.14 - Cleartext Transmission of Sensitive Information
CVSS 5.9
CVE-2020-20128 HIGH
LaraCMS v1.0.1 - Cleartext Transmission of Sensitive Information
CVSS 7.5
CVE-2020-36423 HIGH
Arm Mbed TLS < 2.23.0 - Cleartext Transmission of Sensitive Information via Lucky 13 Countermeasure Bypass
CVSS 7.5
CVE-2020-4980 MEDIUM
IBM QRadar SIEM 7.3-7.4 - Cleartext Transmission of Sensitive Information
CVSS 6.5
CVE-2020-12730 MEDIUM
MagicMotion Flamingo 2 - Info Disclosure
CVSS 5.3
Details
Vulnerabilities 899
Exploit Likelihood High