CWE-523: CWE-523
Yearly Trend
Top Affected Vendors
All CWE-523 CVEs (7)
CVE-2020-25175 exposes specific credentials during network transmission in GE Healthcare imaging and ultrasound products, allowing attackers to interc...
Dec 14, 2020Brocade ASCG web interface versions before 3.2.0 lack HTTP Strict Transport Security (HSTS) enforcement, allowing attackers to downgrade HTTPS connect...
Feb 28, 2025This vulnerability allows a local attacker to capture credentials transmitted in plaintext by the SiteManager provisioning service after initial devic...
Aug 5, 2021The Brightpick Mission Control web application contains hardcoded credentials in client-side JavaScript files, allowing attackers to extract authentic...
Nov 15, 2025PiiGAB M-Bus devices transmit authentication credentials in plaintext format without encryption, allowing attackers to intercept and steal login infor...
Jul 6, 2023CVE-2025-41705 allows an unauthenticated attacker positioned as a man-in-the-middle (MITM) to intercept websocket communications and capture login cre...
Oct 14, 2025Apache Tomcat fails to set the 'secure' attribute on session cookies when using RemoteIpFilter with X-Forwarded-Proto headers from reverse proxies. Th...
Mar 22, 2023About CWE-523 (CWE-523)
Our database tracks 7 CVEs classified as CWE-523, with 2 rated critical and 3 rated high severity. The average CVSS score for CWE-523 vulnerabilities is 7.6.
External reference: View CWE-523 on MITRE CWE →
Monitor CWE-523 Vulnerabilities
Get alerted when new CWE-523 CVEs affect your infrastructure.
Start Monitoring Free