CWE-316 Cleartext Storage of Sensitive Information in Memory
variantThe product stores sensitive information in cleartext in memory.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (55)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-7516US | high7.8OT elevated | — | ||
A CWE-316: Cleartext Storage of Sensitive Information in Memory vulnerability exists in Easergy Builder V1.4.7.2 and prior which could allow an attacker access to login credentials… | ||||
| CVE-2026-8636US | high7.5 | — | ||
IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 allows an attacker to retrieve user passwords and cryptographic keys from memory. Attacker can… | ||||
| CVE-2024-39732US | high7.5OT elevated | — | ||
IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 temporarily stores data from different environments that could be obtained by a malicious user. IBM X-Force ID: 295791… | ||||
| CVE-2023-44153US | high7.5OT elevated | — | ||
Sensitive information disclosure due to cleartext storage of sensitive information in memory. The following products are affected: Acronis Cyber Protect 15 (Linux, macOS, Windows)… | ||||
| CVE-2023-3762US | high7.5OT elevated | — | ||
A vulnerability was found in Intergard SGS 8.7.0. It has been classified as problematic. This affects an unknown part. The manipulation leads to cleartext storage of sensitive info… | ||||
| CVE-2024-24915US | high7.2OT elevated | — | ||
Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump for SmartConsole process and fetch them. | ||||
| CVE-2024-49800US | medium6.5OT elevated | — | ||
IBM ApplinX 11.1 stores sensitive information in cleartext in memory that could be obtained by an authenticated user. | ||||
| CVE-2022-29832US | medium6.5OT elevated | — | ||
Cleartext Storage of Sensitive Information in Memory vulnerability in Mitsubishi Electric Corporation GX Works3 versions 1.015R and later, GX Works2 all versions and GX Developer v… | ||||
| CVE-2022-32969US | medium5.9 | — | ||
MetaMask before 10.11.3 might allow an attacker to access a user's secret recovery phrase because an input field is used for a BIP39 mnemonic, and Firefox and Chromium save such fi… | ||||
| CVE-2026-75137US | medium6.1 | — | ||
UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recover cleartext vault data from process memory even after the a… | ||||
| CVE-2026-75135US | medium6.1 | — | ||
UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows local attackers to recover the master password and decrypt vault contents by reading… | ||||
| CVE-2026-24319US | medium5.8OT elevated | — | ||
In SAP Business One, sensitive information is written to the application�s memory dump files without obfuscation. Gaining access to this information could potentially lead to unaut… | ||||
| CVE-2022-46141US | medium5.5OT elevated | — | ||
A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All versions < V19). An information disclosure vulnerability could allow a local attacker to gain access to the… | ||||
| CVE-2022-33918US | medium5.5OT elevated | — | ||
Dell GeoDrive, Versions 2.1 - 2.2, contains an information disclosure vulnerability. An authenticated non-admin user could potentially exploit this vulnerability and gain access to… | ||||
| CVE-2022-29959US | medium5.5OT elevated | — | ||
Emerson OpenBSI through 2022-04-29 mishandles credential storage. It is an engineering environment for the ControlWave and Bristol Babcock line of RTUs. This environment provides a… | ||||
| CVE-2022-0835US | medium5.5OT elevated | — | ||
AVEVA System Platform 2020 stores sensitive information in cleartext, which may allow access to an attacker or a low-privileged user. | ||||
| CVE-2021-32942US | medium5.5OT elevated | — | ||
The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowViewer) if an authorized, privileged user creates a diagnostic… | ||||
| CVE-2025-48930US | medium5.3 | — | ||
The TeleMessage service through 2025-05-05 stores certain cleartext information in memory, even though memory content may be accessible to an adversary through various avenues. | ||||
| CVE-2021-31989US | medium5.3OT elevated | — | ||
A user with permission to log on to the machine hosting the AXIS Device Manager client could under certain conditions extract a memory dump from the built-in Windows Task Manager a… | ||||
| CVE-2019-3733US | medium4.9 | — | ||
RSA BSAFE Crypto-C Micro Edition, all versions prior to 4.1.4, is vulnerable to three (3) different Improper Clearing of Heap Memory Before Release vulnerability, also known as 'He… | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan