Skip to content

CWE-317 · weakness in Cryptography

Cleartext Storage of Sensitive Information in GUI

7 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

  1. A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The user configuration menu in the web interface of the Control Center Server (CCS) tra…CVE-2019-13947Siemens · CVSS 4.9 · 0.9% likely

    Siemens

  2. Dell Wyse Management Suite 3.6.1 and below contains a Sensitive Data Exposure vulnerability. A low privileged malicious user could potentially exploit this vulnerability in order…CVE-2022-29090Dell · CVSS 8.5 · 0.4% likely

    Dell

  3. Cisco Firepower Management Center Software Configuration Information Disclosure VulnerabilityCVE-2021-34751Cisco · CVSS 4.3 · 0.3% likely

    Cisco

  4. Cisco Firepower Management Center Software Configuration Information Disclosure VulnerabilityCVE-2021-34750Cisco · CVSS 4.3 · 0.3% likely

    Cisco

  5. A vulnerability was reported in Lenovo System Update that could allow a local user with interactive system access the ability to execute code with elevated privileges only during…CVE-2022-0354Lenovo · CVSS 7.3 · 0.3% likely

    Lenovo

  6. Tenda W30E V2 Web UI Reveals Passwords in CleartextCVE-2026-24431Shenzhen Tenda Technology Co., Ltd. · CVSS 7.1 · 0.2% likely

    Shenzhen Tenda Technology Co., Ltd.

  7. Information Disclosure, Tampering, and Denial-of-Service Vulnerabilities in GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, GENESIS, and MC Works64CVE-2025-14816Mitsubishi Electric Corporation · CVSS 9.3 · 0.1% likely

    Mitsubishi Electric

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.