The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
1,358 vulnerabilities with CWE-522
CVE-2025-54156
HIGH
Sante PACS Server < 4.2.3 - Cleartext Transmission of Sensitive Credential Information
CVSS 7.4
CVE-2025-40751
MEDIUM
SIMATIC RTLS Locating Manager < 3.3 - Authenticated Credential Exposure in Report Client
CVSS 6.3
CVE-2025-48709
LOW
BMC Control-M/Server 9.0.21.300 - Info Disclosure
CVSS 3.8
CVE-2025-54394
MEDIUM
Netwrix Directory Manager 11.0.0.0-11.1.25162.02 - Insufficiently Protected Credentials in Excel Resource Requests
CVSS 5.3
CVE-2025-54882
HIGH
Himmelblau 0.8.0-0.9.21 and 1.0.0-beta-1.1.0 - Unprotected Credential Exposure via World-Readable Kerberos Cache
CVSS 7.1
CVE-2025-54876
MEDIUM
Janssen Project <= 1.9.0 - Insufficiently Protected Credentials via CLI Log File
CVE-2025-38739
HIGH
Dell Digital Delivery < 5.6.1.0 - Unauthenticated Information Disclosure via Insufficiently Protected Credentials
CVSS 7.2
CVE-2025-53008
MEDIUM
GLPI 9.3.1-10.0.19 - Authenticated Credential Theft via Malicious Payload
CVSS 6.5
CVE-2025-5922
MEDIUM
TSplus Remote Access Admin Tool <18.40.6.17 - Info Disclosure
CVE-2025-54422
MEDIUM
Sandboxie < 1.16.2 - Insufficiently Protected Credentials via Shared Memory and Command-Line Arguments
CVSS 5.5
CVE-2025-54428
CRITICAL
RevelaCode <1.0.1 - Info Disclosure
CVSS 9.8
CVE-2025-54380
MEDIUM
Opencast < 17.6 - Insufficiently Protected Credentials via MediaPackage XML Fetch
CVSS 6.5
CVE-2025-34139
HIGH
Sitecore Experience Manager (XM) 8.0-10.4 - Unauthenticated Arbitrary File Read
CVE-2025-6227
LOW
Mattermost <10.5.7, <9.11.16 - Info Disclosure
CVSS 2.2
CVE-2025-7565
MEDIUM
LB-LINK BL-AC3600 <1.0.22 - Info Disclosure
CVSS 5.3
CVE-2025-53743
MEDIUM
Jenkins Applitools Eyes Plugin <1.16.5 - Info Disclosure
CVSS 5.3
CVE-2025-53671
MEDIUM
Jenkins Nouvola DiveCloud Plugin <1.08 - Info Disclosure
CVSS 6.5
CVE-2025-53669
MEDIUM
Jenkins VAddy Plugin <1.2.8 - Info Disclosure
CVSS 4.3
CVE-2025-53667
MEDIUM
Jenkins Dead Man's Snitch Plugin 0.1 - Info Disclosure
CVSS 5.3
CVE-2025-53661
MEDIUM
Jenkins Testsigma Test Plan run Plugin <1.6 - Info Disclosure
CVSS 4.3
CVE-2025-53660
MEDIUM
Jenkins QMetry Test Management Plugin <1.13 - Info Disclosure
CVSS 4.3
CVE-2025-53657
MEDIUM
Jenkins ReadyAPI Functional Testing Plugin <1.11 - Info Disclosure
CVSS 4.3
CVE-2025-53654
MEDIUM
Jenkins Statistics Gatherer Plugin <2.0.3 - Info Disclosure
CVSS 6.5
CVE-2025-53650
HIGH
Jenkins Credentials Binding Plugin <687.v619cb_15e923f - Info Discl...
CVSS 7.3
CVE-2025-24508
MEDIUM
IT Management Agent - Info Disclosure
CVSS 6.4
Details
Vulnerabilities
1,358