CWE-315 · Cryptography
Cleartext Storage of Sensitive Information in a Cookie
8CVEs
SortMost likely exploited
8 CVEs with CWE-315 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2018-19941Cleartext Storage of Sensitive Information in CookiesQNAP Systems Inc. · QTS · 2020-12-31 | – | 0.7% | 2020-12-31 |
| CVE-2024-41290FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to store authentication data via the cookie's component.Flatpress · Flatpress · CVSS 8.1 · 2024-10-02 | 8.1 | 0.4% | 2024-10-02 |
| CVE-2025-8528Exrick xboot getMenuList sensitive information in a cookieExrick · xboot · CVSS 3.7 · 2025-08-04 | 3.7 | 0.4% | 2025-08-04 |
| CVE-2025-4537yangzongzhuan RuoYi-Vue Password login.vue sensitive information in a cookieyangzongzhuan · RuoYi-Vue · CVSS 3.1 · 2025-05-11 | 3.1 | 0.3% | 2025-05-11 |
| CVE-2024-247681Panel set-cookie is missing the Secure keyword1Panel-dev · 1Panel · CVSS 6.5 · 2024-02-05 | 6.5 | 0.3% | 2024-02-05 |
| CVE-2024-8644Cleartext Storage of Sensitive Information in Oceanic Software's ValeAppOceanic Software · ValeApp · CVSS 9.3 · 2024-09-27 | 9.3 | 0.3% | 2024-09-27 |
| CVE-2026-25818HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have weak entropy for authentication cook…No vendor recorded · CVSS 9.1 · 2026-03-12 | 9.1 | 0.2% | 2026-03-12 |
| CVE-2021-34564In WirelessHART-Gateway versions 3.0.9 a vulnerability allows to read and write sensitive data in a cookiePhoenix Contact · WHA-GW-F2D2-0-AS- Z2-ETH · CVSS 5.5 · 2021-08-31 | 5.5 | 0.2% | 2021-08-31 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.