CWE-522

Insufficiently Protected Credentials

Parent: CWE-1390 - Weak Authentication

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

1,324 vulnerabilities with CWE-522
CVE-2025-3079 HIGH
Office/Small Office Multifunction Printers/Laser Printers - Info Di...
CVSS 8.7
CVE-2025-3078 HIGH
Production Printers - Info Disclosure
CVSS 8.7
CVE-2025-4679 MEDIUM
Synology Active Backup for Microsoft 365 - Info Disclosure
CVSS 6.5
CVE-2025-33093 HIGH
IBM Sterling Partner Engagement Manager <6.2.2 - Info Disclosure
CVSS 7.5
CVE-2025-46820 HIGH
phpgt/Dom <4.1.8 - Info Disclosure
CVSS 7.1
CVE-2025-2772 MEDIUM
Bectechnologies Router Firmware - Insufficiently Protected Credentials
CVSS 6.5
CVE-2025-32963 MEDIUM
Minio Operator < 7.1.0 - Insufficiently Protected Credentials
CVE-2025-28228 HIGH
Electrolink FM/DAB/TV Transmitter - Credentials Disclosure
CVSS 7.5
CVE-2025-22372 HIGH
SicommNet BASEC <14 Dec 2021 - Info Disclosure
CVE-2025-27192 LOW
Adobe Commerce <2.4.8-beta2 - Insufficiently Protected Credentials
CVSS 2.7
CVE-2025-26628 HIGH
Microsoft Azure Local Cluster - Insufficiently Protected Credentials
CVSS 7.3
CVE-2025-2908 HIGH
MeetMe <2024-09 - Info Disclosure
CVE-2025-2311 CRITICAL
SecHard <3.3.0.20220411 - Privilege Escalation
CVSS 9.0
CVE-2025-25650 CRITICAL
Dorset DG 201 Digital Lock H5_433WBSK_v2.2_220605 - Info Disclosure
CVSS 9.1
CVE-2025-2277 HIGH
Devolutions Server < 2025.1.3.0 - Information Disclosure
CVSS 7.5
CVE-2025-27926 MEDIUM
Nintex Automation < 5.8 - Insufficiently Protected Credentials
CVSS 4.3
CVE-2025-1886 HIGH
Sage 200 Spain <2025.35.000 - Info Disclosure
CVE-2025-27650 CRITICAL
Printerlogic Vasion Print - Insufficiently Protected Credentials
CVSS 9.8
CVE-2025-27648 CRITICAL
Printerlogic Vasion Print - Insufficiently Protected Credentials
CVSS 9.8
CVE-2025-25570 CRITICAL
Vue Vben Admin - Default Credentials
CVSS 9.8
CVE-2025-0760 LOW
Product <Version> - Info Disclosure
CVSS 2.7
CVE-2025-0867 CRITICAL
MEAC - Privilege Escalation
CVSS 9.9
CVE-2025-26492 HIGH
Jetbrains Teamcity < 2024.12.2 - Insufficiently Protected Credentials
CVSS 7.7
CVE-2025-0890 CRITICAL
Zyxel Vmg4325-b10a Firmware - Authentication Bypass
CVSS 9.8
CVE-2025-0498 CRITICAL
Rockwell Automation FactoryTalk <V15.00.001 - Info Disclosure
CVSS 9.8
Details
Vulnerabilities 1,324
Links
MITRE CWE Entry Search this CWE With Exploits