CWE-547 · Other weaknesses
Use of Hard-coded, Security-relevant Constants
10CVEs
SortMost likely exploited
10 CVEs with CWE-547 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2019-14837A flaw was found in keycloack before version 8.0.0. The owner of 'placeholder.org' domain can setup mail server on this domain and knowing only name of a client can reset password…Red Hat · keycloak · CVSS 9.1 · 2020-01-07 | 9.1 | 1.7% | 2020-01-07 |
| CVE-2024-32021Local Git clone may hardlink arbitrary user-readable files into the new repository's "objects/" directorygit · git · CVSS 3.9 · 2024-05-14 | 3.9 | 1.0% | 2024-05-14 |
| CVE-2023-1712Use of Hard-coded, Security-relevant Constants in deepset-ai/haystackdeepset-ai · deepset-ai/haystack · CVSS 9.1 · 2023-03-30 | 9.1 | 0.9% | 2023-03-30 |
| CVE-2025-49151Use of Hard-coded, Security-relevant Constants in MICROSENS NMP Web+Microsens · NMP Web+ · CVSS 9.3 · 2025-06-25 | 9.3 | 0.6% | 2025-06-25 |
| CVE-2025-2081Use of Hard-Coded, Security-Relevant ConstantsOptigo Networks · Visual BACnet Capture Tool · CVSS 8.7 · 2025-03-13 | 8.7 | 0.4% | 2025-03-13 |
| CVE-2025-2079Use of Hard-Coded, Security-Relevant Constants in Optigo Networks Visual BACnet Capture Tool / Optigo Visual Networks Capture ToolOptigo Networks · Visual BACnet Capture Tool · CVSS 8.7 · 2025-03-13 | 8.7 | 0.4% | 2025-03-13 |
| CVE-2026-28256Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer ConciergeTrane · Tracer SC · CVSS 6.9 · 2026-03-12 | 6.9 | 0.3% | 2026-03-12 |
| CVE-2024-39888A vulnerability has been identified in Mendix Encryption (All versions >= V10.0.0 < V10.0.2). Affected versions of the module define a specific hard-coded default value for the En…Siemens · Mendix Encryption · CVSS 7.5 · 2024-07-09 | 7.5 | 0.2% | 2024-07-09 |
| CVE-2024-41885Hardcoding sensitive informationHanwha Vision Co., Ltd. · XRN-420S · CVSS 5.6 · 2024-12-24 | 5.6 | 0.2% | 2024-12-24 |
| CVE-2025-23253NVIDIA NvContainer service for Windows contains a vulnerability in its usage of OpenSSL, where an attacker could exploit a hard-coded constant issue by copying a malicious DLL in…NVIDIA · NVIDIA App · CVSS 2.5 · 2025-04-22 | 2.5 | 0.2% | 2025-04-22 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.