CWE-922: Insecure Storage of Sensitive Information
The product stores sensitive information without properly limiting read or write access by unauthorized actors.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- socfortress copilot SOCFortress CoPilot: Stored comment and SOC-field XSS permits privileged account takeover 9.9 Critical
- yamaha corporation nwr100 Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an issue with insecure... 7.1 High
- drupal content sync (content-sync.io) Content Sync (content-sync.io) - Moderately critical - Information disclosure - SA-CONTRIB-2026-291 3.3 Low
- drupal ai (artificial intelligence) AI (Artificial Intelligence) - Less critical - Information Disclosure - SA-CONTRIB-2026-271 3.1 Low
- oracle corporation javafx Vulnerability in the Oracle JavaFX product of Oracle Java SE (component: JavaFX). Supported... 3.1 Low
- dell os recovery tool Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive... 2.2 Low
- progress moveit transfer MOVEit Transfer Local Disclosure of Session Information Vulnerability 7.3 High
- broadcom brocade sannav, brocade sannav +1 more A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and ... 8.2 High
- flutecode secure folder FluteCode Secure Folder 1.2 -Plaintext vault files in shared storage bypass the PIN gate 6.8 Medium
- quantumtech ltd hide photos - secure vault Hide Photos - Secure vault 4.1.0 - Insecure storage of vault media and wallet records in shared external storage 6.8 Medium
- drupal saml sso - service provider SAML SSO - Service Provider - Moderately critical - Information disclosure - SA-CONTRIB-2026-149 3.8 Low
- genetec inc. synergis softwire Improper access control to the Synergis Softwire installation folder. This vulnerability affects... 7.9 High
- No product listed CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 stores TPM2.0 secrets in a serialized... 4.6 Medium
- intel tdx module Insecure storage of sensitive information in the Intel(R) TDX module for some Intel(R) platform... 6.8 Medium
- datadog android app The Datadog Android application stores operationally sensitive content in plaintext SQLite... 4.6 Medium
- ibm app connect enterprise IBM App Connect Enterprise is vulnerable to a confidential disclosure 5.5 Medium
- dell powerflex manager, powerflex manager (appliance), powerflex manager (rack) +2 more +4 more Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Insecure Storage of Sensitive... 5.5 Medium
- dell powerflex manager, powerflex manager (appliance), powerflex manager (rack) +2 more +4 more Dell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Insecure Storage of Sensitive... 4.0 Medium
- haxtheweb haxcms-nodejs, haxcms-php +1 more HAXcms: Mass Token Exfiltration and Cross-Tenant Hijack 8.7 High
- zyxel wre6505 v2 firmware, wre6505 firmware +1 more ** UNSUPPORTED WHEN ASSIGNED ** An insecure storage of sensitive information vulnerability in the... 4.4 Medium
- kyverno kyverno apicall servicecall implicit bearer token injection leaks kyverno serviceaccount token 8.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Microsoft Cryptographic Services Elevation of Privilege Vulnerability 7.0 High
- code-projects online fir system code-projects Online FIR System SQL Database Backup File complaints.sql sensitive information 6.9 Medium
- code-projects online application system for admission code-projects Online Application System for Admission oas.sql sensitive information 6.9 Medium
- ellite wallos Wallos: SSRF via HTTP Proxy Environment Variable 8.3 High
- reviewx – multi-criteria reviews for woocommerce with google reviews & schema ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More <= 2.2.12 - Unauthenticated Sensitive Information Exposure 5.3 Medium
- apple macos A privacy issue was addressed with improved handling of temporary files. This issue is fixed in... 5.5 Medium
- birtech information technologies industry and trade ltd. co. senseway Cleartext password storage in Birtech Information Technologies' Sensaway 6.5 Medium
- getgophish gophish Gophish is vulnerable to Incorrect Access Control 7.6 High
- rockwell automation verve asset manager Verve Asset Manager – Plaintext Storage Vulnerabilities 8.6 High
- weblate wlc wlc may leak API keys due to an insecure API key configuration 5.3 Medium
- fermax electrónica s.a.u meetme Insecure Storage of Sensitive Information 8.8 High
- leopardhost tnc toolbox: web performance TNC Toolbox: Web Performance <= 1.4.2 - Unauthenticated Sensitive Information Exposure to Privilege Escalation/cPanel Account Takeover 10.0 Critical
- No product listed Improper handling of OTP/TOTP/HOTP values in NetKnights GmbH privacyIDEA Authenticator v.4.3.0 on... 7.2 High
- No product listed Reolink Video Doorbell WiFi DB_566128M5MP_W allows root shell access through an unsecured UART... 6.8 Medium
- tomofun furbo mobile app Tomofun Furbo Mobile App Authentication Token sensitive information 2.4 Low
- tomofun furbo 360, furbo mini, furbo 360 dog camera firmware +1 more +3 more Tomofun Furbo 360/Furbo Mini UART sensitive information 1.0 Low
- tomofun furbo 360, furbo mini, furbo 360 dog camera firmware +1 more +3 more Tomofun Furbo 360/Furbo Mini Debug Log S3 Bucket collect_logs.sh sensitive information 4.8 Medium
- samsung wear os, samsung mobile devices +1 more Insecure storage of sensitive information in Galaxy Watch prior to SMR Oct-2025 Release 1 allows... 4.0 Medium
- newforma project center Newforma Info Exchange (NIX) insufficiently protected credentials 4.8 Medium
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 more Vasion Print (formerly PrinterLogic) Insecure Inter-Process Communication Allows Local Session Hijacking 6.9 Medium
- apple ipados, ios and ipados, iphone os +2 more The issue was addressed with improved handling of caches. This issue is fixed in iOS 18.7 and... 4.0 Medium
- kiosoft stored value unattended payment solution Some "Stored Value" Unattended Payment Solutions of KioSoft use vulnerable NFC cards. Attackers... 9.1 Critical
- calix gigacenter ont Calix GigaCenter ONT firmware - Sensitive Information Disclosure 5.1 Medium
- samsung android, samsung mobile secure folder +1 more Insecure Storage of Sensitive Information in Secure Folder prior to Android 16 allows local... 6.2 Medium
- ind co.,ltd f2l assist-ss-a, f2l assist-ss-e, hl320-dls (for module mc7330) +9 more +11 more Multiple products provided by iND Co.,Ltd contain an insecure storage of sensitive information... 7.1 High
- kapsch ris-9160 firmware, ris-9260 firmware +1 more Incorrect access control in the EEPROM component of Kapsch TrafficCom RIS-9160 & RIS-9260... 6.8 Medium
- 4cstrategies exonaut An issue was discovered in 4C Strategies Exonaut 21.6. Passwords, stored in the database, are... 5.3 Medium
- hewlett packard enterprise hpe telco network function virtual orchestrator Sensitive Credential Information stored insecurely in System Database 6.0 Medium
- grandstream ucm6510 firmware An issue in Grandstream UCM6510 v.1.0.20.52 and before allows a remote attacker to obtain... 6.5 Medium
- Show olderLoading…