CWE-760 · Cryptography
Use of a One-Way Hash with a Predictable Salt
11CVEs
SortMost likely exploited
11 CVEs with CWE-760 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2020-28214A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon M221 (all references, all versions), that could allow an attacker to pre-compute the hash…Schneider-Electric · Modicon M221 (all references, all versions) · CVSS 9.8 · 2020-12-11 | 9.8 | 0.7% | 2020-12-11 |
| CVE-2024-38881An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a remote attacker to perform a Rainbow Table Password crac…Horizoncloud · Caterease · CVSS 7.5 · 2024-08-02 | 7.5 | 0.4% | 2024-08-02 |
| CVE-2023-22599InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-760: Use of a One-way Hash w…InHand Networks · InRouter 302 · CVSS 7 · 2023-01-12 | 7.0 | 0.3% | 2023-01-12 |
| CVE-2026-121450CFNext before 3.1.0 Admin Password Recovery via MD5-Derived Subscription UUIDPAICNI · CFNext · CVSS 7.5 · 2026-11-03 | 7.5 | 0.3% | 2026-11-03 |
| CVE-2025-9290Authentication Weakness on Omada Controllers, Gateways and Access PointsTP-Link Systems Inc. · Omada Software Controller · CVSS 6 · 2026-01-22 | 6.0 | 0.2% | 2026-01-22 |
| CVE-2024-13951One way hash with predictable saltABB · ASPECT-Enterprise · CVSS 7.6 · 2025-05-22 | 7.6 | 0.2% | 2025-05-22 |
| CVE-2018-5552DocuTrac DTISQLInstaller.exe Hard-Coded SaltDocuTrac · DTISQLInstaller.exe · CVSS 2.9 · 2018-03-19 | 2.9 | 0.2% | 2018-03-19 |
| CVE-2026-9370ulisesbocchio jasypt-spring-boot Password Hash SimpleGCMConfig.java getSecretKeySaltGenerator hash predictable saltulisesbocchio · jasypt-spring-boot · CVSS 3.7 · 2026-05-24 | 3.7 | 0.2% | 2026-05-24 |
| CVE-2026-82759Reversible IP address pseudonymisation in AshAuthentication audit log hash modeteam-alembic · ash_authentication · CVSS 1.8 · 2026-09-17 | 1.8 | 0.1% | 2026-09-17 |
| CVE-2026-46749A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected application uses a password hashing implementation with a static, hardcoded salt…Siemens · SINEC INS · CVSS 7.5 · 2026-06-09 | 7.5 | 0.1% | 2026-06-09 |
| CVE-2025-26486Broken or Risky Cryptographic Algorithm, Use of Password Hash With Insufficient Computational Effort, Use of Weak Hash, Use of a One-Way Hash with a Predictable Salt vulnerabiliti…Beta80 · Life 1st · CVSS 6 · 2025-03-19 | 6.0 | 0.1% | 2025-03-19 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.