CWE-319

High likelihood

Cleartext Transmission of Sensitive Information

Parent: CWE-311 - Missing Encryption of Sensitive Data

The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

898 vulnerabilities with CWE-319
CVE-2024-48121 MEDIUM
HI-SCAN 6040i Hitrax HX-03-19-I - Info Disclosure
CVSS 6.5
CVE-2024-45102 MEDIUM
Lenovo XClarity Administrator < 4.1 - Authenticated Privilege Escalation via SSO Provider
CVSS 6.8
CVE-2024-42181 LOW
HCL MyXalytics - Cleartext Transmission of Sensitive Information
CVSS 1.6
CVE-2024-46505 CRITICAL
Infoblox BloxOne v2.4 - Info Disclosure
CVSS 9.1
CVE-2024-11946 MEDIUM
iXsystems TrueNAS CORE - Info Disclosure
CVSS 6.5
CVE-2024-10973 MEDIUM
Keycloak Quarkus Server 25.0.0-25.99.9 - Cleartext Transmission of Sensitive Information via JGroups Replication
CVSS 5.7
CVE-2024-49820 LOW
IBM Security Guardium Key Lifecycle Manager <4.2.1 - Info Disclosure
CVSS 3.7
CVE-2024-49819 MEDIUM
IBM Security Guardium Key Lifecycle Manager <4.2.1 - Info Disclosure
CVSS 4.1
CVE-2024-53246 MEDIUM
Splunk Enterprise <9.3.2, <9.2.4, <9.1.7 & Splunk Cloud <9.3.2408.101 - Sensitive Info Disclosure via SPL
CVSS 5.3
CVE-2024-47577 LOW
SAP Commerce Cloud - Info Disclosure
CVSS 2.7
CVE-2024-6515 CRITICAL
ABB ASPECT/MATRIX/NEXUS Firmware < 3.08.03 - Cleartext Transmission of Sensitive Information
CVSS 9.6
CVE-2024-9834 CRITICAL
Ventilator <unknown - Info Disclosure
CVSS 9.3
CVE-2024-28169 MEDIUM
BigDL < 2.5.0 - Cleartext Transmission of Sensitive Information
CVSS 5.4
CVE-2024-43432 MEDIUM
moodle < 4.1.12 and 4.4.0-4.4.2 - Cleartext Transmission of Sensitive Information via cURL Wrapper Redirect
CVSS 5.3
CVE-2024-50634 HIGH
Watcharr < 1.43.0 - Privilege Escalation via Weak JWT Token
CVSS 8.8
CVE-2024-32946 MEDIUM
LevelOne WBR-6012 Firmware R0.40e6 - Cleartext Transmission of Sensitive Information via Web and FTP Services
CVSS 5.9
CVE-2024-8013 LOW
Mongo <5.0.29, <6.0.17, <7.0.12, <7.3.4 - Info Disclosure
CVSS 2.2
CVE-2024-50624 MEDIUM
KDE Kmail < 6.2.0 - Cleartext Transmission of Sensitive Information via Autoconfig URL
CVSS 5.9
CVE-2024-40595 MEDIUM
One Identity Safeguard for Privileged Sessions <7.5.1 - Auth Bypass
CVSS 5.3
CVE-2024-40090 MEDIUM
Vilo 5 Mesh WiFi System <= 5.16.1.33 - Info Disclosure
CVSS 4.3
CVE-2024-49387 HIGH
Acronis Cyber Protect < 16 build 38690 - Cleartext Transmission of Sensitive Information in acep-collector Service
CVSS 7.5
CVE-2024-48788 HIGH
YESCAM 1.0.2 - Cleartext Transmission of Sensitive Information via Firmware Update Process
CVSS 7.5
CVE-2024-47833 MEDIUM
Taipy < 4.0.0 - Cleartext Transmission of Sensitive Information via Session Cookies
CVSS 6.5
CVE-2024-9620 MEDIUM
Ansible Automation Platform - Info Disclosure
CVSS 5.3
CVE-2024-47789 HIGH
D3D Security IP Camera D8801 - Info Disclosure
Details
Vulnerabilities 898
Exploit Likelihood High