CWE-921 · Information Disclosure
Storage of Sensitive Data in a Mechanism without Access Control
8CVEs
SortMost likely exploited
8 CVEs with CWE-921 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-41965Socomec MOD3GP-SY-120K Insecure Storage of Sensitive InformationSocomec · MODULYS GP (MOD3GP-SY-120K) · CVSS 7.5 · 2023-09-18 | 7.5 | 0.6% | 2023-09-18 |
| CVE-2025-30016Authentication Bypass Vulnerability in SAP Financial ConsolidationSAP_SE · SAP Financial Consolidation · CVSS 9.8 · 2025-04-08 | 9.8 | 0.6% | 2025-04-08 |
| CVE-2023-2665Storage of Sensitive Data in a Mechanism without Access Control in francoisjacquet/rosariosisfrancoisjacquet · francoisjacquet/rosariosis · CVSS 7.5 · 2023-05-12 | 7.5 | 0.6% | 2023-05-12 |
| CVE-2021-27456Philips Gemini PET/CT Storage of Sensitive Data in a Mechanism Without Access ControlPhilips · Gemini 16 Slice · CVSS 2.4 · 2022-03-23 | 2.4 | 0.2% | 2022-03-23 |
| CVE-2024-5206Sensitive Data Leakage in sklearn.feature_extraction.text.TfidfVectorizer in scikit-learn/scikit-learnscikit-learn · scikit-learn/scikit-learn · CVSS 4.7 · 2024-06-06 | 4.7 | 0.2% | 2024-06-06 |
| CVE-2025-24870Insecure Key & Secret Management vulnerability in SAP GUI for WindowsSAP_SE · SAP GUI for Windows · CVSS 6 · 2025-02-11 | 6.0 | 0.2% | 2025-02-11 |
| CVE-2025-24843Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Storage of Sensitive Data in a Mechanism without Access ControlDario Health · USB-C Blood Glucose Monitoring System Starter Kit Android Applications · CVSS 5.1 · 2025-02-28 | 5.1 | 0.2% | 2025-02-28 |
| CVE-2023-41818An improper use of the SD card for sensitive data vulnerability was reported in the Motorola Device Help application that could allow a local attacker to read system logs.Motorola · Phones · CVSS 5 · 2024-05-03 | 5.0 | 0.1% | 2024-05-03 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.