CWE-759 · Cryptography
Use of a One-Way Hash without a Salt
19CVEs
SortMost likely exploited
19 CVEs with CWE-759 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-1430FluentCRM - Marketing Automation For WordPress <= 2.8.01 - Insufficient Use of Hash as Authorization Controltechjewel · FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Opt… · CVSS 6.5 · 2023-06-09 | 6.5 | 0.8% | 2023-06-09 |
| CVE-2021-21253Use of a One-Way Hash without a Salt in OnlineVotingSystemdbijaya · OnlineVotingSystem · CVSS 5.8 · 2021-01-21 | 5.8 | 0.7% | 2021-01-21 |
| CVE-2020-16244GE Digital APM Classic, Versions 4.4 and prior. Salt is not used for hash calculation of passwords, making it possible to decrypt passwords. This design flaw, along with the IDOR…Ge · GE Digital APM Classic · 2020-09-23 | – | 0.7% | 2020-09-23 |
| CVE-2020-25164B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplusB. Braun Melsungen AG · SpaceCom · CVSS 6.5 · 2022-04-14 | 6.5 | 0.6% | 2022-04-14 |
| CVE-2025-34208Vasion Print (formerly PrinterLogic) Insecure Password HashingVasion · Print Virtual Appliance Host · CVSS 8.2 · 2025-10-02 | 8.2 | 0.4% | 2025-10-02 |
| CVE-2025-15544Weak Credential Protection During TP-Link Omada Device AdoptionTP-Link Systems Inc. · Omada Gateways · CVSS 6.9 · 2026-08-03 | 6.9 | 0.3% | 2026-08-03 |
| CVE-2024-8453PLANET Technology switch devices - Weak hash for users' passwordsPLANET Technology · GS-4210-24PL4C hardware 2.0 · CVSS 4.9 · 2024-09-30 | 4.9 | 0.3% | 2024-09-30 |
| CVE-2025-15631Weak Credential Storage in TP-Link Omada DevicesTP-Link Systems Inc. · Omada Gateways · CVSS 5.7 · 2026-08-03 | 5.7 | 0.3% | 2026-08-03 |
| CVE-2023-33838IBM Security Verify Governance information disclosureIBM · Security Verify Governance · CVSS 4.4 · 2025-01-29 | 4.4 | 0.2% | 2025-01-29 |
| CVE-2026-96552sfturing hosp_order User Password MD5.java MD5.getMD5 hash without saltsfturing · hosp_order · CVSS 3.1 · 2026-09-23 | 3.1 | 0.2% | 2026-09-23 |
| CVE-2025-36253Multiple Vulnerabilities in IBM Concert Software.IBM · Concert · CVSS 5.9 · 2026-02-02 | 5.9 | 0.2% | 2026-02-02 |
| CVE-2025-10205Predictable Salt and Weak Hashing AlgorithmABB · FLXEON · CVSS 8.8 · 2025-09-17 | 8.8 | 0.2% | 2025-09-17 |
| CVE-2025-36271IBM Integrated Analytics System (IIAS) is affected by a predictable salt vulnerability in Magneto componentIBM · Integrated Analytics System · CVSS 5.9 · 2026-08-28 | 5.9 | 0.2% | 2026-08-28 |
| CVE-2026-13576CallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1 hashesCallBackery · CVSS 7.5 · 2026-10-30 | 7.5 | 0.2% | 2026-10-30 |
| CVE-2026-6217Information Disclosure in Pik Online Software's PortalPik Online Software Solutions Inc. · Pik Online Portal · CVSS 6.3 · 2026-09-04 | 6.3 | 0.2% | 2026-09-04 |
| CVE-2025-53884NeuVector has an insecure password storage vulnerable to rainbow attackSUSE · neuvector · CVSS 5.3 · 2025-09-17 | 5.3 | 0.2% | 2025-09-17 |
| CVE-2026-45027WeGIA: Use of Weak Password Hashing Algorithm (SHA-256, no salt) in html/login.phpLabRedesCefetRJ · WeGIA · CVSS 5.9 · 2026-05-27 | 5.9 | 0.2% | 2026-05-27 |
| CVE-2025-27408Manifest Uses a One-Way Hash without a Saltmnfst · manifest · CVSS 4.8 · 2025-02-28 | 4.8 | 0.2% | 2025-02-28 |
| CVE-2026-57263A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9). The project password feature in the affected products stores the password as an unsalted SHA-256 has…Siemens · LOGO! Soft Comfort · CVSS 6.8 · 2026-08-11 | 6.8 | 0.1% | 2026-08-11 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.