cve.bz

CWE-317: Cleartext Storage of Sensitive Information in GUI

Filter

The product stores sensitive information in cleartext within the GUI.

What the weakness is: CWE-317 at MITRE. All weaknesses

Ask an AI about CWE-317

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-317: Cleartext Storage of Sensitive Information in GUI and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/317.html and https://cve.bz/cve/cwe/317?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 9.3CVE-2025-14816EPSS 0.10%

    Cleartext Storage of Sensitive Information in GUI vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and p…

  2. 8.6CVE-2026-27516EPSS 0.2%

    Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior expose user passwords in plaintext within the administrative interface and HTTP responses, allowing recovery of valid credentials.

  3. 7.1CVE-2026-24431EPSS 0.2%

    Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.19(5037) display stored user account passwords in plaintext within the administrative web interface. Any user with access to the affected management pages can directly v…

  4. 4.3CVE-2021-34751EPSS 0.3%

    A vulnerability in the administrative web-based GUI configuration manager of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to access sensitive configuration information. The attacker would r…

  5. 4.3CVE-2021-34750EPSS 0.3%

    A vulnerability in the administrative web-based GUI configuration manager of Cisco Firepower Management Center Software could allow an authenticated, remote attacker to access sensitive configuration information. The attacker would require…

  6. 6.5CVE-2022-29090EPSS 0.4%

    Dell Wyse Management Suite 3.6.1 and below contains a Sensitive Data Exposure vulnerability. A low privileged malicious user could potentially exploit this vulnerability in order to obtain credentials. The attacker may be able to use the e…

  7. 7.8CVE-2022-0354EPSS 0.3%

    A vulnerability was reported in Lenovo System Update that could allow a local user with interactive system access the ability to execute code with elevated privileges only during the installation of a System Update package released before …

  8. 4.9CVE-2019-13947EPSS 0.9%

    A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The user configuration menu in the web interface of the Control Center Server (CCS) transfers user passwords in clear to the client (browser). An …