CWE-759 · 16 records

Use of a One-Way Hash without a Salt

CVEs in this class

16 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
34Monitor	CVE-2025-10205No exploit	Predictable Salt and Weak Hashing Algorithmabb · flxeon · CWE-759 Pre-auth	High8.7	—	0.2%	Sep 17, 2025
30Monitor	CVE-2020-25164No exploit	B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplusbbraun · datamodule compactplus · CWE-759 Pre-auth	High7.5	—	0.6%	Apr 14, 2022
30Monitor	CVE-2025-36253No exploit	Multiple Vulnerabilities in IBM Concert Software.ibm · concert · CWE-759 Pre-auth	High7.5	—	0.2%	Feb 2, 2026
28Monitor	CVE-2020-16244No exploit	GE Digital APM Classic, Versions 4.4 and prior.ge · asset performance management classic · CWE-759 Broken access control (IDOR)	High7.2	—	0.7%	Sep 23, 2020
28Monitor	CVE-2026-57263No exploit	A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9).siemens · logo! soft comfort · CWE-759	High7.0	—	0.1%	Aug 11, 2026
27Monitor	CVE-2025-15544No exploit	Weak Credential Protection During TP-Link Omada Device Adoptiontp-link · omada oc200 v3 firmware · CWE-759 Pre-auth	Medium6.9	—	0.3%	Aug 3, 2026
26Monitor	CVE-2023-1430Proof of concept	FluentCRM - Marketing Automation For WordPress <= 2.8.01 - Insufficient Use of Hash as Authorization Controlwpmanageninja · fluentcrm · CWE-759 Pre-auth	Medium6.5	—	0.8%	Jun 9, 2023
25Monitor	CVE-2026-6217No exploit	Information Disclosure in Pik Online Software's Portalpik online software solutions inc. · pik online portal · CWE-759	Medium6.3	—	0.2%	Sep 4, 2026
23Monitor	CVE-2026-45027No exploit	WeGIA: Use of Weak Password Hashing Algorithm (SHA-256, no salt) in html/login.phplabredescefetrj · wegia · CWE-759 Pre-auth	Medium5.9	—	0.2%	May 27, 2026
23Monitor	CVE-2025-36271No exploit	IBM Integrated Analytics System (IIAS) is affected by a predictable salt vulnerability in Magneto componentibm · integrated analytics system · CWE-759 Pre-auth	Medium5.9	—	0.2%	Aug 28, 2026
22Monitor	CVE-2025-15631No exploit	Weak Credential Storage in TP-Link Omada Devicestp-link · omada fusion 2.5g firmware · CWE-759	Medium5.7	—	0.3%	Aug 3, 2026
21Monitor	CVE-2021-21253No exploit	Use of a One-Way Hash without a Salt in OnlineVotingSystemonlinevotingsystem project · onlinevotingsystem · CWE-759 Pre-auth	Medium5.3	—	0.7%	Jan 21, 2021
21Monitor	CVE-2025-53884No exploit	NeuVector has an insecure password storage vulnerable to rainbow attacksuse · neuvector · CWE-759 Pre-auth	Medium5.3	—	0.2%	Sep 17, 2025
19Monitor	CVE-2023-33838No exploit	IBM Security Verify Governance information disclosureibm · security verify governance · CWE-759	Medium4.9	—	0.2%	Jan 28, 2025
19Monitor	CVE-2025-27408No exploit	Manifest Uses a One-Way Hash without a Saltmnfst · manifest · CWE-759 Pre-auth	Medium4.8	—	0.2%	Feb 28, 2025
11Monitor	CVE-2026-9370No exploit	ulisesbocchio jasypt-spring-boot Password Hash SimpleGCMConfig.java getSecretKeySaltGenerator hash predictable saltulisesbocchio · jasypt-spring-boot · CWE-759 Pre-auth	Low2.9	—	0.3%	May 24, 2026

CVE-2025-10205
34Monitor
Predictable Salt and Weak Hashing Algorithm
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
abb · flxeonSep 17, 2025
CVE-2020-25164
30Monitor
B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
bbraun · datamodule compactplusApr 14, 2022
CVE-2025-36253
30Monitor
Multiple Vulnerabilities in IBM Concert Software.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
ibm · concertFeb 2, 2026
CVE-2020-16244
28Monitor
GE Digital APM Classic, Versions 4.4 and prior.
HighCVSS 7.2No exploitEPSS 1%
- Broken access control (IDOR)
ge · asset performance management classicSep 23, 2020
CVE-2026-57263
28Monitor
A vulnerability has been identified in LOGO! Soft Comfort (All versions < V9).
HighCVSS 7.0No exploitEPSS 0%
siemens · logo! soft comfortAug 11, 2026
CVE-2025-15544
27Monitor
Weak Credential Protection During TP-Link Omada Device Adoption
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
tp-link · omada oc200 v3 firmwareAug 3, 2026
CVE-2023-1430
26Monitor
FluentCRM - Marketing Automation For WordPress <= 2.8.01 - Insufficient Use of Hash as Authorization Control
MediumCVSS 6.5Proof of conceptEPSS 1%
- Pre-auth
wpmanageninja · fluentcrmJun 9, 2023
CVE-2026-6217
25Monitor
Information Disclosure in Pik Online Software's Portal
MediumCVSS 6.3No exploitEPSS 0%
pik online software solutions inc. · pik online portalSep 4, 2026
CVE-2026-45027
23Monitor
WeGIA: Use of Weak Password Hashing Algorithm (SHA-256, no salt) in html/login.php
MediumCVSS 5.9No exploitEPSS 0%
- Pre-auth
labredescefetrj · wegiaMay 27, 2026
CVE-2025-36271
23Monitor
IBM Integrated Analytics System (IIAS) is affected by a predictable salt vulnerability in Magneto component
MediumCVSS 5.9No exploitEPSS 0%
- Pre-auth
ibm · integrated analytics systemAug 28, 2026
CVE-2025-15631
22Monitor
Weak Credential Storage in TP-Link Omada Devices
MediumCVSS 5.7No exploitEPSS 0%
tp-link · omada fusion 2.5g firmwareAug 3, 2026
CVE-2021-21253
21Monitor
Use of a One-Way Hash without a Salt in OnlineVotingSystem
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
onlinevotingsystem project · onlinevotingsystemJan 21, 2021
CVE-2025-53884
21Monitor
NeuVector has an insecure password storage vulnerable to rainbow attack
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
suse · neuvectorSep 17, 2025
CVE-2023-33838
19Monitor
IBM Security Verify Governance information disclosure
MediumCVSS 4.9No exploitEPSS 0%
ibm · security verify governanceJan 28, 2025
CVE-2025-27408
19Monitor
Manifest Uses a One-Way Hash without a Salt
MediumCVSS 4.8No exploitEPSS 0%
- Pre-auth
mnfst · manifestFeb 28, 2025
CVE-2026-9370
11Monitor
ulisesbocchio jasypt-spring-boot Password Hash SimpleGCMConfig.java getSecretKeySaltGenerator hash predictable salt
LowCVSS 2.9No exploitEPSS 0%
- Pre-auth
ulisesbocchio · jasypt-spring-bootMay 24, 2026

All vulnerability classes