CWE-549
16 published CVEs are weaknesses of this kind, as the records or NVD name it.
- Published CVEs
- 16
- Last 12 months
- 4
- Critical
- 0
- Known exploited
- 0
Critical 0High 0Medium 13Low 3Not scored 0
CVEs per yearBy the year they were published
- 20223
- 20232
- 20242
- 20257
- 20262
Newest CVEs
- CVE-2026-3314
Missing Password Masking in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer and Hitachi Ops Center Analyzer viewpoint
Hitachi · Hitachi Ops Center Analyzer
Medium4.6 - CVE-2025-13175
Insecure Password Storage in Y Soft SafeQ 6
YSoft · SafeQ 6
Medium5.1 - CVE-2025-42904
Information Disclosure vulnerability in Application Server ABAP
SAP_SE · Application Server ABAP
Medium6.5 - CVE-2025-64170
sudo-rs: Partial password reveal is possible after timeout
trifectatechfoundation · sudo-rs
Low3.8 - CVE-2025-4526
Dígitro NGC Explorer Configuration missing password field masking
Dígitro · NGC Explorer
Medium5.3 - CVE-2025-31728
Jenkins AsakusaSatellite Plugin 0.1.1 and earlier does not mask AsakusaSatellite API keys displayed on the job configuration form, increasing the potential for…
Jenkins Project · Jenkins AsakusaSatellite Plugin
Medium5.5 - CVE-2025-31727
Jenkins AsakusaSatellite Plugin 0.1.1 and earlier stores AsakusaSatellite API keys unencrypted in job config.xml files on the Jenkins controller where they can…
Jenkins Project · Jenkins AsakusaSatellite Plugin
Medium5.5 - CVE-2025-30197
Jenkins Zoho QEngine Plugin 1.0.29.vfa_cc23396502 and earlier does not mask the QEngine API Key form field, increasing the potential for attackers to observe…
Jenkins Project · Jenkins Zoho QEngine Plugin
Low3.1 - CVE-2025-0148
Zoom Jenkins Marketplace plugin - Missing Password Field Masking
Zoom Communications, Inc · Zoom Jenkins Marketplace plugin
Low2.6 - CVE-2024-10122
Topdata Inner Rep Plus WebServer Operator Details Form InnerRepPlus.html missing password field masking
Topdata · Inner Rep Plus WebServer
Medium5.1