CWE-921 · 8 records
Storage of Sensitive Data in a Mechanism without Access Control
CVEs in this class
8 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2025-30016No exploit | Authentication Bypass Vulnerability in SAP Financial Consolidationsap_se · sap financial consolidation · CWE-921 | Critical9.8 | — | 0.6% | Apr 8, 2025 |
30Monitor | CVE-2023-41965No exploit | Socomec MOD3GP-SY-120K Insecure Storage of Sensitive Informationsocomec · modulys gp firmware · CWE-921 | High7.5 | — | 0.6% | Sep 18, 2023 |
30Monitor | CVE-2023-2665No exploit | Storage of Sensitive Data in a Mechanism without Access Control in francoisjacquet/rosariosisrosariosis · rosariosis · CWE-921 | High7.5 | — | 0.6% | May 11, 2023 |
24Monitor | CVE-2025-24870No exploit | Insecure Key & Secret Management vulnerability in SAP GUI for Windowssap_se · sap gui for windows · CWE-921 | Medium6.0 | — | 0.1% | Feb 10, 2025 |
20Monitor | CVE-2025-24843No exploit | Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Storage of Sensitive Data in a Mechanism without Access Controldario health · usb-c blood glucose monitoring system starter kit android applications · CWE-921 | Medium5.1 | — | 0.1% | Feb 28, 2025 |
20Monitor | CVE-2023-41818No exploit | An improper use of the SD card for sensitive data vulnerability was reported in the Motorola Device Help application that could allow a locmotorola · phones · CWE-921 | Medium5.0 | — | 0.1% | May 3, 2024 |
18Monitor | CVE-2024-5206No exploit | Sensitive Data Leakage in sklearn.feature_extraction.text.TfidfVectorizer in scikit-learn/scikit-learnscikit-learn · scikit-learn · CWE-921 | Medium4.7 | — | 0.1% | Jun 6, 2024 |
9Monitor | CVE-2021-27456No exploit | Philips Gemini PET/CT Storage of Sensitive Data in a Mechanism Without Access Controlphillips · gemini 882300 firmware · CWE-921 | Low2.4 | — | 0.2% | Mar 23, 2022 |
- CVE-2025-3001639Monitor
Authentication Bypass Vulnerability in SAP Financial Consolidation
CriticalCVSS 9.8No exploitEPSS 0%sap_se · sap financial consolidationApr 8, 2025
- CVE-2023-4196530Monitor
Socomec MOD3GP-SY-120K Insecure Storage of Sensitive Information
HighCVSS 7.5No exploitEPSS 0%socomec · modulys gp firmwareSep 18, 2023
- CVE-2023-266530Monitor
Storage of Sensitive Data in a Mechanism without Access Control in francoisjacquet/rosariosis
HighCVSS 7.5No exploitEPSS 0%rosariosis · rosariosisMay 11, 2023
- CVE-2025-2487024Monitor
Insecure Key & Secret Management vulnerability in SAP GUI for Windows
MediumCVSS 6.0No exploitEPSS 0%sap_se · sap gui for windowsFeb 10, 2025
- CVE-2025-2484320Monitor
Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Storage of Sensitive Data in a Mechanism without Access Control
MediumCVSS 5.1No exploitEPSS 0%dario health · usb-c blood glucose monitoring system starter kit android applicationsFeb 28, 2025
- CVE-2023-4181820Monitor
An improper use of the SD card for sensitive data vulnerability was reported in the Motorola Device Help application that could allow a loc
MediumCVSS 5.0No exploitEPSS 0%motorola · phonesMay 3, 2024
- CVE-2024-520618Monitor
Sensitive Data Leakage in sklearn.feature_extraction.text.TfidfVectorizer in scikit-learn/scikit-learn
MediumCVSS 4.7No exploitEPSS 0%scikit-learn · scikit-learnJun 6, 2024
- CVE-2021-274569Monitor
Philips Gemini PET/CT Storage of Sensitive Data in a Mechanism Without Access Control
LowCVSS 2.4No exploitEPSS 0%phillips · gemini 882300 firmwareMar 23, 2022