CWE-649 · Cryptography
Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking
9CVEs
SortMost likely exploited
9 CVEs with CWE-649 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2019-3730RSA BSAFE Micro Edition Suite versions prior to 4.1.6.3 (in 4.1.x) and prior to 4.4 (in 4.2.x and 4.3.x), are vulnerable to an Information Exposure Through an Error Message vulner…Dell · RSA BSAFE MES · CVSS 5.9 · 2019-09-30 | 5.9 | 0.6% | 2019-09-30 |
| CVE-2010-3300It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks.Owasp · OWASP ESAPI · 2021-06-22 | – | 0.4% | 2021-06-22 |
| CVE-2024-10772SICK InspectorP61x and SICK InspectorP62x are vulnerable for firmware modificationSICK AG · SICK InspectorP61x · CVSS 8.8 · 2024-12-06 | 8.8 | 0.3% | 2024-12-06 |
| CVE-2026-96414In affected versions of Octopus Server, insufficient integrity protection of authentication cookies, combined with incorrect validation of permissions assigned to a user that allo…Octopus Deploy · Octopus Server · CVSS 8.7 · 2026-11-11 | 8.7 | 0.2% | 2026-11-11 |
| CVE-2025-41351Weak encryption on Funambol's cloud serverFunambol · Cloud Server · CVSS 6 · 2026-01-28 | 6.0 | 0.2% | 2026-01-28 |
| CVE-2024-36279Reliance on obfuscation or encryption of security-relevant inputs without integrity checking issue exists in "FreeFrom - the nostr client" App versions prior to 1.3.5 for Android…FreeFrom K.K. · "FreeFrom - the nostr client" App for Android · CVSS 5.3 · 2024-06-17 | 5.3 | 0.1% | 2024-06-17 |
| CVE-2025-5323fossasia open-event-server Mail Verification mail.py send_email_change_user_email reliance on obfuscation or encryption of security-relevant inputs without integrity checkingfossasia · open-event-server · CVSS 3.7 · 2025-05-29 | 3.7 | 0.1% | 2025-05-29 |
| CVE-2026-95105Cloak AES-CTR cipher lacks ciphertext authentication, allowing chosen-plaintext forgery by bit flippingdanielberkompas · cloak · CVSS 8.2 · 2026-10-06 | 8.2 | 0.1% | 2026-10-06 |
| CVE-2026-105208ZITADEL before 4.17.3 Session Hijacking via Forgeable IdP Intent Tokenszitadel · zitadel · CVSS 7.7 · 2026-10-04 | 7.7 | 0.1% | 2026-10-04 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.