CWE-525: Use of Web Browser Cache Containing Sensitive Information
The web application does not use an appropriate caching policy that specifies the extent to which each web page and associated form fields should be cached.
A kind of CWE-524 Use of Cache Containing Sensitive Information.
From the CWE List. © The MITRE Corporation.
Newest
- drupal media alias display Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-292 5.9 Medium
- drupal ai (artificial intelligence) AI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-270 5.9 Medium
- drupal imageapi optimize webp ImageAPI Optimize WebP - Moderately critical - Information disclosure - SA-CONTRIB-2026-247 3.7 Low
- drupal media alias display Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-245 3.7 Low
- drupal simple oauth (oauth2) & openid connect Simple OAuth (OAuth2) & OpenID Connect - Moderately critical - Access bypass - SA-CONTRIB-2026-242 5.4 Medium
- ibm concert IBM Concert Software Use of Web Browser Cache Containing Sensitive Information 4.0 Medium
- drupal webform Webform - Less critical - Access bypass - SA-CONTRIB-2026-165 3.1 Low
- drupal key auth Key auth - Moderately critical - Access bypass - SA-CONTRIB-2026-138 5.4 Medium
- nodejs undici undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives 7.4 High
- hcl software aftermarket epc HCL Aftermarket EPC is vulnerable to attack since the application does not have an appropriate... 4.3 Medium
-
github.com/juev/nebula-meshGo nebula-mesh: POST /api/v1/hosts/{id}/mobile-bundle response lacks Cache-Control: no-store 2.3 Low - siemens ruggedcom rst2428p A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V4.0).... 5.9 Medium
- withastro astro @astrojs/node: Cache Poisoning due to incorrect error handling when if-match header is malformed 5.3 Medium
- truesec lapswebui Admin Passwords Cached by Browsers in Truesec LAPSWebUI 6.0 Medium
- hcltech devops plan IBM DevOps Plan REST APIs are vulnerable to exposure of sensitive data through request query parameters. 6.2 Medium
- shenzhen tenda technology co., ltd. tenda f3, tenda f3 firmware +1 more Tenda F3 Plaintext Credential Exposure in Configuration Download 7.1 High
- shenzhen tenda technology co., ltd. w30e v2, tenda w30e firmware +1 more Tenda W30E V2 Missing Cache Controls for Credential-bearing Pages 4.8 Medium
- hcl aion HCL AION is affected by a Cacheable HTTP Response vulnerability 2.8 Low
- drupal, drupal core +1 more Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008 3.7 Low
- liferay dxp, portal, digital experience platform +2 more Liferay Portal and DXP use an incorrect cache-control header 4.6 Medium
- hcl aion HCL AION is susceptible to Cacheable SSL Page Found vulnerability 3.7 Low
- ibm openpages IBM OpenPages information disclosure 4.0 Medium
-
better-callnpm Better Call routing bug can lead to Cache Deception 4.9 Medium - ibm sterling b2b integrator, sterling file gateway +1 more IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure 4.0 Medium
- auth0 nextjs-auth0 NextJS-Auth0 SDK Vulnerable to CDN Caching of Session Cookies 7.7 High
- ibm cloud pak for security, qradar suite software, qradar suite +2 more IBM QRadar Suite Software and IBM Cloud Pak for Security information disclosure 4.0 Medium
- hitachi jp1/it desktop management 2 - smart device manager Information Exposure vulnerability in JP1/IT Desktop Management 2 - Smart Device Manager 3.9 Low
- ibm sterling control center IBM Sterling Control Center information disclosure 4.0 Medium
- ibm automation decision services IBM Automation Decision Services information disclosure 6.2 Medium
- hcltech devops velocity, ibm urbancode velocity +1 more IBM UrbanCode Velocity information disclosure 4.0 Medium
- dpgaspar flask-appbuilder Flask-AppBuilder login form allows browser to cache sensitive fields 3.6 Low
- hcl software nomad server on domino HCL Nomad server on Domino is affected by a use of web browser cache containing sensitive information vulnerability 3.7 Low
- ibm cloud pak for security, qradar suite software, qradar suite +2 more IBM Cloud Pak for Security information disclosure 4.0 Medium
- apache airflow Apache Airflow: Cache Control - Storage of Sensitive Data in Browser Cache 5.5 Medium
- ibm maximo application suite, maximo asset management +1 more IBM Maximo Application Suite information disclosure 3.3 Low
- ibm aspera console IBM Aspera Console information disclosure 4.0 Medium
- ibm txseries for multiplatforms, txseries for multiplatform +1 more IBM TXSeries for Multiplatforms information disclosure 4.0 Medium
- ibm secure proxy, sterling secure proxy +1 more IBM Secure Proxy information disclosure 4.0 Medium
- ibm watson cloudpak for data data stores, cloud pak for data +1 more IBM Watson CloudPak for Data Data Stores information disclosure 4.0 Medium
- red hat 3scale api management platform 2, redhat 3scale api management +1 more 3scale-admin-portal: logged out users tokens can be accessed 5.5 Medium
- ibm cloud pak for business automation IBM Cloud Pak for Business Automation information disclosure 4.0 Medium
- mendix, siemens mendix applications using mendix 7, mendix applications using mendix 8 +1 more +3 more A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23... 5.5 Medium
- apache traffic control Cache Manipulation Attack in Apache Traffic Control 5.8 Medium
- rtomayko rack-cach Rack-Cache caches sensitive headers 7.5 High