CWE-549 · Authentication
Missing Password Field Masking
16CVEs
SortMost likely exploited
16 CVEs with CWE-549 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-20914Cisco Identity Services Engine Sensitive Information Disclosure VulnerabilityCisco · Cisco Identity Services Engine Software · CVSS 4.9 · 2022-08-10 | 4.9 | 1.0% | 2022-08-10 |
| CVE-2024-10122Topdata Inner Rep Plus WebServer Operator Details Form InnerRepPlus.html missing password field maskingTopdata · Inner Rep Plus WebServer · CVSS 2.7 · 2024-10-18 | 2.7 | 0.5% | 2024-10-18 |
| CVE-2023-49106Missing Password Field Masking Vulnerability in Hitachi Device ManagerHitachi · Hitachi Device Manager · CVSS 4.6 · 2024-01-16 | 4.6 | 0.4% | 2024-01-16 |
| CVE-2022-1342A lack of password masking in Devolutions Remote Desktop Manager allows physically proximate attackers to observe sensitive data. A caching issue can cause sensitive fields to som…Devolutions · Remote Desktop Manager · 2022-06-15 | – | 0.4% | 2022-06-15 |
| CVE-2025-42904Information Disclosure vulnerability in Application Server ABAPSAP_SE · Application Server ABAP · CVSS 6.5 · 2025-12-09 | 6.5 | 0.4% | 2025-12-09 |
| CVE-2025-13175Insecure Password Storage in Y Soft SafeQ 6YSoft · SafeQ 6 · CVSS 5.1 · 2026-01-14 | 5.1 | 0.3% | 2026-01-14 |
| CVE-2023-2062Information Disclosure vulnerability in EtherNet/IP Configuration toolsMitsubishi Electric Corporation · EtherNet/IP Configuration tool for RJ71EIP91 SW1DNN-EIPCT-BD · CVSS 6.2 · 2023-06-02 | 6.2 | 0.3% | 2023-06-02 |
| CVE-2025-4526Dígitro NGC Explorer Configuration missing password field maskingDígitro · NGC Explorer · CVSS 4.3 · 2025-05-11 | 4.3 | 0.3% | 2025-05-11 |
| CVE-2025-31728Jenkins AsakusaSatellite Plugin 0.1.1 and earlier does not mask AsakusaSatellite API keys displayed on the job configuration form, increasing the potential for attackers to observ…Jenkins Project · Jenkins AsakusaSatellite Plugin · CVSS 5.5 · 2025-04-02 | 5.5 | 0.3% | 2025-04-02 |
| CVE-2025-31727Jenkins AsakusaSatellite Plugin 0.1.1 and earlier stores AsakusaSatellite API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users…Jenkins Project · Jenkins AsakusaSatellite Plugin · CVSS 5.5 · 2025-04-02 | 5.5 | 0.3% | 2025-04-02 |
| CVE-2025-30197Jenkins Zoho QEngine Plugin 1.0.29.vfa_cc23396502 and earlier does not mask the QEngine API Key form field, increasing the potential for attackers to observe and capture it.Jenkins Project · Jenkins Zoho QEngine Plugin · CVSS 3.1 · 2025-03-19 | 3.1 | 0.3% | 2025-03-19 |
| CVE-2023-1763Canon IJ Network Tool/Ver.4.7.5 and earlier (supported OS: OS X 10.9.5-macOS 13),IJ Network Tool/Ver.4.7.3 and earlier (supported OS: OS X 10.7.5-OS X 10.8) allows an attacker to…Canon Inc. · Canon IJ NW Tool · CVSS 6.5 · 2023-05-17 | 6.5 | 0.3% | 2023-05-17 |
| CVE-2022-22550Dell PowerScale OneFS, versions 8.2.2 and above, contain a password disclosure vulnerability. An unprivileged local attacker could potentially exploit this vulnerability, leading…Dell · PowerScale OneFS · CVSS 6.7 · 2022-04-12 | 6.7 | 0.2% | 2022-04-12 |
| CVE-2026-3314Missing Password Masking in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer and Hitachi Ops Center Analyzer viewpointHitachi · Hitachi Ops Center Analyzer · CVSS 4.6 · 2026-05-26 | 4.6 | 0.2% | 2026-05-26 |
| CVE-2025-0148Zoom Jenkins Marketplace plugin - Missing Password Field MaskingZoom Communications, Inc · Zoom Jenkins Marketplace plugin · CVSS 2.6 · 2025-02-03 | 2.6 | 0.2% | 2025-02-03 |
| CVE-2025-64170sudo-rs: Partial password reveal is possible after timeouttrifectatechfoundation · sudo-rs · CVSS 3.8 · 2025-11-12 | 3.8 | 0.1% | 2025-11-12 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.