Vulnerabilities > Missing Encryption of Sensitive Data

DATE CVE VULNERABILITY TITLE RISK
2019-06-12 CVE-2019-0307 Missing Encryption of Sensitive Data vulnerability in SAP Solution Manager 7.2
Diagnostics Agent in Solution Manager, version 7.2, stores several credentials such as SLD user connection as well as Solman user communication in the SAP Secure Storage file which is not encrypted by default.
low complexity
sap CWE-311
2.4
2019-06-07 CVE-2018-10698 Missing Encryption of Sensitive Data vulnerability in Moxa Awk-3121 Firmware 1.14
An issue was discovered on Moxa AWK-3121 1.14 devices.
network
low complexity
moxa CWE-311
critical
9.8
2019-06-07 CVE-2018-10694 Missing Encryption of Sensitive Data vulnerability in Moxa Awk-3121 Firmware 1.14
An issue was discovered on Moxa AWK-3121 1.14 devices.
network
high complexity
moxa CWE-311
8.1
2019-06-07 CVE-2018-10690 Missing Encryption of Sensitive Data vulnerability in Moxa Awk-3121 Firmware 1.14
An issue was discovered on Moxa AWK-3121 1.14 devices.
network
high complexity
moxa CWE-311
8.1
2019-06-06 CVE-2019-11523 Missing Encryption of Sensitive Data vulnerability in Anviz M3 Firmware
Anviz Global M3 Outdoor RFID Access Control executes any command received from any source.
network
low complexity
anviz CWE-311
critical
9.8
2019-06-06 CVE-2019-7311 Missing Encryption of Sensitive Data vulnerability in Linksys Wrt1900Acs Firmware 1.0.3.187766
An issue was discovered on Linksys WRT1900ACS 1.0.3.187766 devices.
local
low complexity
linksys CWE-311
7.8
2019-05-09 CVE-2019-11836 Missing Encryption of Sensitive Data vulnerability in Rediff Rediffmail 2.2.6
The Rediffmail (aka com.rediff.mail.and) application 2.2.6 for Android has cleartext mail content in file storage, persisting after a logout.
low complexity
rediff CWE-311
4.6
2019-05-07 CVE-2018-13992 Missing Encryption of Sensitive Data vulnerability in Phoenixcontact products
The WebUI of PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx versions 1.0 to 1.34 allows for plaintext transmission (HTTP) of user credentials by default.
network
low complexity
phoenixcontact CWE-311
critical
9.8
2019-05-03 CVE-2019-1692 Missing Encryption of Sensitive Data vulnerability in Cisco Application Policy Infrastructure Controller
A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller (APIC) Software could allow an unauthenticated, remote attacker to access sensitive system usage information.
network
low complexity
cisco CWE-311
5.3
2019-05-03 CVE-2019-1589 Missing Encryption of Sensitive Data vulnerability in Cisco Nx-Os 8.3(0)Sk(0.39)
A vulnerability in the Trusted Platform Module (TPM) functionality of software for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, local attacker with physical access to view sensitive information on an affected device.
low complexity
cisco CWE-311
4.6