Skip to content
Noroxi

CWE-525 · 39 records

Use of Web Browser Cache Containing Sensitive Information

CVEs in this class

39 records

  • CVE-2025-48947
    30Monitor

    NextJS-Auth0 SDK Vulnerable to CDN Caching of Session Cookies

    HighCVSS 7.7No exploitEPSS 0%

    auth0 · nextjs-auth0Jun 4, 2025

  • CVE-2024-30130
    30Monitor

    HCL Nomad server on Domino is affected by a use of web browser cache containing sensitive information vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    hcltech · nomad server on dominoJul 18, 2024

  • CVE-2025-52625
    30Monitor

    HCL AION is susceptible to Cacheable SSL Page Found vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    hcltech · aionOct 10, 2025

  • CVE-2025-52659
    30Monitor

    HCL AION is affected by a Cacheable HTTP Response vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    hcltech · aionJan 19, 2026

  • CVE-2024-31906
    24Monitor

    IBM Automation Decision Services information disclosure

    MediumCVSS 6.2No exploitEPSS 0%

    ibm · automation decision servicesJan 26, 2025

  • CVE-2025-15554
    24Monitor

    Admin Passwords Cached by Browsers in Truesec LAPSWebUI

    MediumCVSS 6.0No exploitEPSS 0%

    truesec · lapswebuiMar 16, 2026

  • CVE-2026-41918
    23Monitor

    A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V4.0).

    MediumCVSS 5.9No exploitEPSS 0%

    siemens · ruggedcom rst2428pJun 2, 2026

  • CVE-2024-25142
    22Monitor

    Apache Airflow: Cache Control - Storage of Sensitive Data in Browser Cache

    MediumCVSS 5.5No exploitEPSS 0%

    apache · airflowJun 14, 2024

  • CVE-2024-45314
    22Monitor

    Flask-AppBuilder login form allows browser to cache sensitive fields

    MediumCVSS 5.5No exploitEPSS 0%

    dpgaspar · flask-appbuilderSep 4, 2024

  • CVE-2021-42015
    22Monitor

    A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.26), Mendix Applications using Mendix 8 (All

    MediumCVSS 5.5No exploitEPSS 0%

    mendix · mendixNov 9, 2021

  • CVE-2023-27545
    22Monitor

    IBM Watson CloudPak for Data Data Stores information disclosure

    MediumCVSS 5.5No exploitEPSS 0%

    ibm · cloud pak for dataFeb 28, 2024

  • CVE-2026-41322
    21Monitor

    @astrojs/node: Cache Poisoning due to incorrect error handling when if-match header is malformed

    MediumCVSS 5.3No exploitEPSS 0%

    withastro · astroApr 24, 2026

  • CVE-2026-87940
    21Monitor

    Key auth - Moderately critical - Access bypass - SA-CONTRIB-2026-138

    MediumCVSS 5.4No exploitEPSS 0%

    drupal · key authOct 22, 2026

  • CVE-2026-24437
    19Monitor

    Tenda W30E V2 Missing Cache Controls for Credential-bearing Pages

    MediumCVSS 4.8No exploitEPSS 0%

    tenda · w30e firmwareJan 26, 2026

  • CVE-2025-62276
    18Monitor

    The Document Library and the Adaptive Media modules in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay D

    MediumCVSS 4.6No exploitEPSS 0%

    liferay · digital experience platformNov 1, 2025

  • CVE-2024-23571
    17Monitor

    HCL Aftermarket EPC is vulnerable to attack since the application does not have an appropriate caching policy specifying the extent to which

    MediumCVSS 4.3No exploitEPSS 0%

    hclsoftware · aftermarket epcJul 17, 2026

  • CVE-2025-1334
    16Monitor

    IBM QRadar Suite Software and IBM Cloud Pak for Security information disclosure

    MediumCVSS 4.0No exploitEPSS 0%

    ibm · cloud pak for securityJun 3, 2025

  • CVE-2026-4405
    16Monitor

    IBM Concert Software Use of Web Browser Cache Containing Sensitive Information

    MediumCVSS 4.0No exploitEPSS 0%

    ibm · concertOct 19, 2026

  • CVE-2025-1348
    16Monitor

    IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure

    MediumCVSS 4.0No exploitEPSS 0%

    ibm · sterling b2b integratorJun 18, 2025

  • CVE-2025-27525
    15Monitor

    Information Exposure vulnerability in JP1/IT Desktop Management 2 - Smart Device Manager

    LowCVSS 3.9No exploitEPSS 0%

    hitachi · jp1/it desktop management 2 - smart device managerMay 15, 2025

  • CVE-2025-13083
    14Monitor

    Drupal core - Moderately critical - Information disclosure - SA-CORE-2025-008

    LowCVSS 3.7No exploitEPSS 0%

    drupal · drupalNov 18, 2025

  • CVE-2024-22343
    13Monitor

    IBM TXSeries for Multiplatforms information disclosure

    LowCVSS 3.3No exploitEPSS 0%

    ibm · txseries for multiplatformMay 14, 2024

  • CVE-2024-22349
    13Monitor

    IBM UrbanCode Velocity information disclosure

    LowCVSS 3.3No exploitEPSS 0%

    ibm · urbancode velocityJan 20, 2025

  • CVE-2023-46181
    13Monitor

    IBM Secure Proxy information disclosure

    LowCVSS 3.3No exploitEPSS 0%

    ibm · sterling secure proxyMar 15, 2024

  • CVE-2024-22333
    13Monitor

    IBM Maximo Application Suite information disclosure

    LowCVSS 3.3No exploitEPSS 0%

    ibm · maximo application suiteJun 13, 2024

All vulnerability classes