CWE-319: Cleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
A kind of CWE-311 Missing Encryption of Sensitive Data.
From the CWE List. © The MITRE Corporation.
Newest
- cryptomatorCryptomator: Hub unlocking accepts plaintext HTTP and unvalidated endpoint schemes8.7 High
- edimax gs-5008pl firmware, edimax technology co., ltd. gs-5008pl +1 moreEdimax GS-5008PL <= 1.00.54 Transmits Credentials Over Cleartext HTTP8.7 High
- ibm sterling partner engagement managerIBM Sterling Partner Engagement Manager Information Disclosure3.7 Low
- jetbrains dataloreIn JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure...6.3 Medium
- microsoft azure iot explorerAzure IoT Explorer Information Disclosure Vulnerability7.5 High
- microsoft azure iot explorerAzure IoT Explorer Information Disclosure Vulnerability7.5 High
- nexus nexusinterfaceAn issue pertaining to CWE-319: Cleartext Transmission of Sensitive Information was discovered in...7.5 High
- mendi neurofeedback headsetMendi Neurofeedback Headset Bluetooth Low Energy cleartext transmission2.3 Low
- rustdesk server, rustdesk-client rustdesk client +1 moreRustDesk Client Transmits Preset Address Book Password Verbatim in Heartbeat Sync6.9 Medium
- rustdesk, rustdesk-client rustdesk client +1 moreRustDesk HTTP Client Silently Accepts Invalid TLS Certificates After Handshake Failure8.7 High
- pebblepower pebble prism ultra firmwareA lack of authentication and authorization mechanisms in the Bluetooth Low Energy (BLE) communication protocol of SRK Powertech Pvt Ltd Pebble Prism Ultra v2.9.2 allows attackers to reverse engineer t…9.6 Critical
- openclawOpenClaw < 2026.2.21 - Insecure Control UI Authentication over Plaintext HTTP6.1 Medium
- ibm app connect operator, app connect enterprise certified containers operands, app connect enterprisecertified containers operands +2 moreIBM App Connect Enterprise Certified Container IntegrationServer and IntegrationRuntime operands that report metrics are vulnerable to loss of confidentiality5.9 Medium
- gallagher hanwha vms integration, nx witness vms integration, nxwitness vms and hanwha vms integrations +2 moreCleartext Transmission of Sensitive Information (CWE-319) in a component used in the Gallagher...5.6 Medium
- No product listedIn Microsoft Exchange through 2019, Exchange ActiveSync (EAS) configurations on on-premises...7.5 High
- google androidIn multiple functions of btm_ble_sec.cc, there is a possible unencrypted communication due to...6.5 Medium
- shenzhen hongyavision technology co., ltd. (sodola networks) sodola sl902-swtgw124as, sodola-network sl902-swtgw124as firmware +1 moreSODOLA SL902-SWTGW124AS <= 200.1.20 Cleartext Credential Transmission8.2 High
- jinan usr iot technology limited (pusr) usr-w610Jinan USR IOT Technology Limited (PUSR) USR-W610 Cleartext Transmission of Sensitive Information7.5 High
- ibm db2 recovery expert for luw, db2 recovery expert +1 moreMultiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows5.9 Medium
- micca auto electronics co., ltd. car alarm system ke700Micca KE700 Cleartext transmission of key fob ID5.7 Medium
- pan software & information technologies ltd. pancafe proImproper Access Control in Pan Software's PanCafe Pro8.3 High
- yokogawa electric corporation fast/tools, yokogawa fast\/tools +1 moreA vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. The...2.1 Low
- moxa uc-1200a series, uc-1222a firmware, uc-2222a-t-ap firmware +33 more +35 moreA physical attack vulnerability exists in certain Moxa industrial computers using TPM-backed LUKS...7.0 High
- shenzhen tenda technology co., ltd. tenda ac7, tenda ac7 firmware +1 moreTenda AC7 Transmits Admin Credentials Without HTTPS Protection8.2 High
- aws sagemaker python sdkCleartext transmission of sensitive materials in aws/sagemaker-python-sdk8.5 High
- teamviewer dex, digital employee experience +1 moreTransmission of Unencrypted Data in Content Distribution Service6.5 Medium
- dell objectscale, elastic cloud storage +1 moreDell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0,...6.5 Medium
- dell objectscale, elastic cloud storage +1 moreDell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0,...7.5 High
- aveva process optimizationAVEVA Process Optimization Cleartext Transmission of Sensitive Information7.6 High
- lenovo thinkplus fu100, thinkplus fu200, thinkplus tsd303 +5 more +7 moreA potential vulnerability was reported in ThinkPlus configuration software that could allow a...6.8 Medium
- broadcom dx netops spectrumSpectrum password returned in clear5.3 Medium
- tenda 300mbps wireless router f3 and n300 easy setup routerInsecure Transmission Vulnerability in Tenda Wireless Routers8.7 High
- tenda 300mbps wireless router f3 and n300 easy setup routerCleartext Transmission Vulnerability in Tenda Wireless Routers8.7 High
- iwt ltd. facesentry access control system, iwt facesentry access control system firmware +1 moreFaceSentry Access Control System 6.4.8 Authentication Credentials MiTM Disclosure9.1 Critical
- efacec qc 60/90/120EXCHANGE OF CREDENTIALS IN CLEAR TEXT8.7 High
- guangzhou yeroo tech co., ltd. ids6 dsspro digital signage systemiDS6 DSSPro Digital Signage System 6.2 Cleartext Password Disclosure via Cookie8.6 High
- shenzhen xingmeng qihang media co., ltd. qihang media web (qh.aspx) digital signageQiHang Media Web Digital Signage 3.0.9 Cookie Authentication Credentials Disclosure8.6 High
- vatilon pa4 firmwareVatilon v1.12.37-20240124 was discovered to transmit user credentials in plaintext.7.5 High
- delta electronics dvp-12se, deltaww dvp-12se firmware +1 moreDVP-12SE - Modbus/TCP Cleartext Transmission of Sensitive Information7.2 High
- johnson controls iqpanel2, iqhub,iqpanel2+,iqpanel 4,powergJohnson Controls PowerG and IQPanel cleartext transmission of sensitive information2.3 Low
- netun helpflash iot firmwareThe OTA firmware update mechanism in Netun Solutions HelpFlash IoT (firmware...6.6 Medium
- hcl software devops deploy, hcltechsw hcl devops deploy +1 moreHCL DevOps Deploy is susceptible to a cleartext transmission of sensitive information5.9 Medium
- ruijie reyeeos, ruijienetworks reyee os +1 moreReyeeOS 1.204.1614 Man-in-the-Middle Remote Code Execution via CWMP9.2 Critical
- gomlab gom playerGOM Player 2.3.90.5360 Remote Code Execution via Insecure IE Component7.5 High
- ibm devops deploy, ucd - ibm devops deploy +1 moreIBM DevOps Deploy is susceptible to a Cleartext Transmission of Sensitive Information5.9 Medium
- meatmeetThe mobile application is configured to allow clear text traffic to all domains and communicates...9.1 Critical
- mersive solstice pod api, solstice pod firmware +1 moreSolstice Pod API Session Key Extraction via API Endpoint6.9 Medium
- waveshare rs232\/485 to wifi eth \(b\) firmwareWaveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2...7.5 High
- socomec diris digiware m-70, diris m-70 firmware +1 moreA cleartext transmission vulnerability exists in the WEBVIEW-M functionality of Socomec DIRIS...5.9 Medium
- kerlink kerosKerlink gateways running KerOS prior to version 5.10 expose their web interface exclusively over...6.8 Medium
- Show moreLoading…