CWE-525 · Information Disclosure
Use of Web Browser Cache Containing Sensitive Information
37CVEs
SortMost likely exploited
37 CVEs with CWE-525 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2025-48947NextJS-Auth0 SDK Vulnerable to CDN Caching of Session Cookiesauth0 · nextjs-auth0 · CVSS 7.7 · 2025-06-04 | 7.7 | 0.4% | 2025-06-04 |
| CVE-2026-118550AI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-270Drupal · AI (Artificial Intelligence) · CVSS 5.9 · 2026-10-30 | 5.9 | 0.3% | 2026-10-30 |
| CVE-2024-25142Apache Airflow: Cache Control - Storage of Sensitive Data in Browser CacheApache Software Foundation · Apache Airflow · CVSS 5.5 · 2024-06-14 | 5.5 | 0.3% | 2024-06-14 |
| CVE-2024-23571HCL Aftermarket EPC is vulnerable to attack since the application does not have an appropriate caching policy specifying the extent to which the page and its form fields should be…HCLSoftware · Aftermarket EPC · CVSS 4.3 · 2026-07-17 | 4.3 | 0.3% | 2026-07-17 |
| CVE-2024-30130HCL Nomad server on Domino is affected by a use of web browser cache containing sensitive information vulnerabilityHCL Software · Nomad server on Domino · CVSS 3.7 · 2024-07-19 | 3.7 | 0.3% | 2024-07-19 |
| CVE-2026-41322@astrojs/node: Cache Poisoning due to incorrect error handling when if-match header is malformedwithastro · astro · CVSS 5.3 · 2026-04-24 | 5.3 | 0.3% | 2026-04-24 |
| CVE-2025-13083Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008Drupal · Drupal core · CVSS 3.7 · 2025-11-18 | 3.7 | 0.3% | 2025-11-18 |
| CVE-2024-45314Flask-AppBuilder login form allows browser to cache sensitive fieldsdpgaspar · Flask-AppBuilder · CVSS 3.6 · 2024-09-04 | 3.6 | 0.3% | 2024-09-04 |
| CVE-2025-52625HCL AION is susceptible to Cacheable SSL Page Found vulnerabilityHCL · AION · CVSS 3.7 · 2025-10-10 | 3.7 | 0.2% | 2025-10-10 |
| CVE-2026-87940Key auth - Moderately critical - Access bypass - SA-CONTRIB-2026-138Drupal · Key auth · CVSS 5.4 · 2026-10-22 | 5.4 | 0.2% | 2026-10-22 |
| CVE-2021-42015A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.26), Mendix Applications using Mendix 8 (All versions < V8.18.12), Mendix Applicati…Siemens · Mendix Applications using Mendix 7 · 2021-11-09 | – | 0.2% | 2021-11-09 |
| CVE-2024-22343IBM TXSeries for Multiplatforms information disclosureIBM · TXSeries for Multiplatforms · CVSS 4 · 2024-05-10 | 4.0 | 0.2% | 2024-05-10 |
| CVE-2024-22349IBM UrbanCode Velocity information disclosureIBM · UrbanCode Velocity · CVSS 4 · 2025-01-20 | 4.0 | 0.2% | 2025-01-20 |
| CVE-2026-96369Webform - Less critical - Access bypass - SA-CONTRIB-2026-165Drupal · Webform · CVSS 3.1 · 2026-10-22 | 3.1 | 0.2% | 2026-10-22 |
| CVE-2026-118571Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-292Drupal · Media Alias Display · CVSS 5.9 · 2026-10-30 | 5.9 | 0.2% | 2026-10-30 |
| CVE-2026-114548ImageAPI Optimize WebP - Moderately critical - Information disclosure - SA-CONTRIB-2026-247Drupal · ImageAPI Optimize WebP · CVSS 3.7 · 2026-10-30 | 3.7 | 0.2% | 2026-10-30 |
| CVE-2026-114546Media Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-245Drupal · Media Alias Display · CVSS 3.7 · 2026-10-30 | 3.7 | 0.2% | 2026-10-30 |
| CVE-2023-27545IBM Watson CloudPak for Data Data Stores information disclosureIBM · Watson CloudPak for Data Data Stores · CVSS 4 · 2024-02-29 | 4.0 | 0.2% | 2024-02-29 |
| CVE-2026-41918A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V4.0). The affected applications stores sensitive information in the browser cache when a…Siemens · RUGGEDCOM RST2428P · CVSS 5.7 · 2026-06-02 | 5.7 | 0.2% | 2026-06-02 |
| CVE-2025-52659HCL AION is affected by a Cacheable HTTP Response vulnerabilityHCL Software · AION · CVSS 2.8 · 2026-01-19 | 2.8 | 0.2% | 2026-01-19 |
| CVE-2024-31906IBM Automation Decision Services information disclosureIBM · Automation Decision Services · CVSS 6.2 · 2025-01-26 | 6.2 | 0.2% | 2025-01-26 |
| CVE-2023-23469IBM Cloud Pak for Business Automation information disclosureIBM · Cloud Pak for Business Automation · CVSS 4 · 2023-02-01 | 4.0 | 0.2% | 2023-02-01 |
| CVE-2026-114542Simple OAuth (OAuth2) & OpenID Connect - Moderately critical - Access bypass - SA-CONTRIB-2026-242Drupal · Simple OAuth (OAuth2) & OpenID Connect · CVSS 5.4 · 2026-10-30 | 5.4 | 0.2% | 2026-10-30 |
| CVE-2025-1334IBM QRadar Suite Software and IBM Cloud Pak for Security information disclosureIBM · QRadar Suite Software · CVSS 4 · 2025-06-03 | 4.0 | 0.2% | 2025-06-03 |
| CVE-2024-22333IBM Maximo Application Suite information disclosureIBM · Maximo Application Suite · CVSS 3.3 · 2024-06-13 | 3.3 | 0.2% | 2024-06-13 |
| CVE-2023-46181IBM Secure Proxy information disclosureIBM · Secure Proxy · CVSS 4 · 2024-03-15 | 4.0 | 0.2% | 2024-03-15 |
| CVE-2026-24437Tenda W30E V2 Missing Cache Controls for Credential-bearing PagesShenzhen Tenda Technology Co., Ltd. · W30E V2 · CVSS 4.8 · 2026-01-26 | 4.8 | 0.2% | 2026-01-26 |
| CVE-2025-15554Admin Passwords Cached by Browsers in Truesec LAPSWebUITruesec · LAPSWebUI · CVSS 6 · 2026-03-16 | 6.0 | 0.2% | 2026-03-16 |
| CVE-2022-38383IBM Cloud Pak for Security information disclosureIBM · Cloud Pak for Security · CVSS 4 · 2024-06-28 | 4.0 | 0.2% | 2024-06-28 |
| CVE-2023-43035IBM Sterling Control Center information disclosureIBM · Sterling Control Center · CVSS 4 · 2025-04-10 | 4.0 | 0.2% | 2025-04-10 |
| CVE-2022-43841IBM Aspera Console information disclosureIBM · Aspera Console · CVSS 4 · 2024-05-30 | 4.0 | 0.2% | 2024-05-30 |
| CVE-2025-27525Information Exposure vulnerability in JP1/IT Desktop Management 2 - Smart Device ManagerHitachi · JP1/IT Desktop Management 2 - Smart Device Manager · CVSS 3.9 · 2025-05-15 | 3.9 | 0.1% | 2025-05-15 |
| CVE-2025-1348IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosureIBM · Sterling B2B Integrator · CVSS 4 · 2025-06-18 | 4.0 | 0.1% | 2025-06-18 |
| CVE-2026-4405IBM Concert Software Use of Web Browser Cache Containing Sensitive InformationIBM · Concert · CVSS 4 · 2026-10-19 | 4.0 | 0.1% | 2026-10-19 |
| CVE-2025-62276The Document Library and the Adaptive Media modules in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.10, 2023.Q…Liferay · Portal · CVSS 4.6 · 2025-10-31 | 4.6 | 0.1% | 2025-10-31 |
| CVE-2025-36082IBM OpenPages information disclosureIBM · OpenPages · CVSS 4 · 2025-09-15 | 4.0 | 0.1% | 2025-09-15 |
| CVE-2025-36364IBM DevOps Plan REST APIs are vulnerable to exposure of sensitive data through request query parameters.IBM · DevOps Plan · CVSS 6.2 · 2026-03-03 | 6.2 | 0.1% | 2026-03-03 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.