CWE-319 敏感数据的明文传输 类弱点 453 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-319 指敏感信息在通信过程中以明文形式传输，易被网络嗅探。攻击者通常利用中间人攻击或公共 Wi-Fi 环境截获数据，窃取凭证或隐私。开发者应避免使用 HTTP 等未加密协议，强制实施 TLS/SSL 加密传输，并对关键数据进行端到端加密，确保即使数据被拦截也无法被解读，从而保障通信安全。
try { URL u = new URL("http://www.secret.example.org/"); HttpURLConnection hu = (HttpURLConnection) u.openConnection(); hu.setRequestMethod("PUT"); hu.connect(); OutputStream os = hu.getOutputStream(); hu.disconnect(); } catch (IOException e) { //... }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2020-12008 | Baxter ExactaMix EM2400和ExactaMix EM1200 安全漏洞 — Baxter ExactaMix EM 2400 & EM 1200 | 7.5 | - | 2020-06-29 |
| CVE-2020-12036 | Baxter PrismaFlex和PrisMax 安全漏洞 — Baxter PrismaFlex and PrisMax | 7.5 | - | 2020-06-29 |
| CVE-2020-12048 | Baxter Phoenix Hemodialysis Delivery System 安全漏洞 — Baxter Phoenix Hemodialysis Delivery System | 7.5 | - | 2020-06-29 |
| CVE-2020-12040 | Baxter Sigma Spectrum Infusion System和Baxter Spectrum Infusion System 安全漏洞 — Baxter Sigma Spectrum Infusion Pumps | 7.1 | - | 2020-06-29 |
| CVE-2020-10624 | Honeywell ControlEdge PLC和ControlEdge RTU 安全漏洞 — ControlEdge PLC | 7.5 | - | 2020-06-26 |
| CVE-2020-10628 | Honeywell ControlEdge PLC和ControlEdge RTU 安全漏洞 — ControlEdge PLC | 7.5 | - | 2020-06-26 |
| CVE-2020-2013 | Palo Alto Networks PAN-OS 安全漏洞 — PAN-OS | 8.3 | High | 2020-05-13 |
| CVE-2020-7488 | 多款Schneider Electric产品安全漏洞 — EcoStruxure Machine Expert (all versions)SoMachine, SoMachine Motion (all versions)Modicon M218 Logic Controller (all versions)Modicon M241 Logic Controller (all versions)Modicon M251 Logic Controller (all versions)Modicon M258 Logic Controller (all versions) | 7.5 | - | 2020-04-22 |
| CVE-2020-6997 | Moxa EDS-G516E和EDS-510E 安全漏洞 — Moxa EDS-G516E Series firmware, Version 5.2 or lower | 5.3 | - | 2020-03-24 |
| CVE-2020-7003 | Moxa IOxpress configuration utility和ioLogik 2500 安全漏洞 — Moxa ioLogik 2500 series firmware, Version 3.0 or lower, IOxpress configuration utility, Version 2.3.0 or lower | 7.5 | - | 2020-03-24 |
| CVE-2020-5399 | Cloud Foundry CredHub 安全漏洞 — CredHub | 8.7 | - | 2020-02-12 |
| CVE-2019-18285 | Siemens SPPA-T3000 缓冲区错误漏洞 — SPPA-T3000 Application Server | 5.9 | - | 2019-12-12 |
| CVE-2012-5562 | rhn-proxy 安全漏洞 — Red Hat Satellite Proxy v 5.6 | 8.6 | High | 2019-12-02 |
| CVE-2019-6846 | 多款Schneider产品安全漏洞 — Modicon M580, Modicon M340, Modicon BMxCRA and 140CRA modules (all firmware versions) | 6.5 | - | 2019-10-29 |
| CVE-2019-6845 | 多款Schneider Electric产品安全漏洞 — Modicon M580, Modicon M340, Modicon Premium , Modicon Quantum (all firmware versions) | 7.5 | - | 2019-10-29 |
| CVE-2019-9532 | Cobham plc EXPLORER 710 安全漏洞 — Explorer 710 | 7.8 | - | 2019-10-10 |
| CVE-2019-5635 | Belwith Products Hickory Smart Ethernet Bridge H077646 信息泄露漏洞 — Hickory Smart Ethernet Bridge | 7.5 | - | 2019-08-22 |
| CVE-2019-11276 | Pivotal Application Service Pivotal Apps Manager 访问控制错误漏洞 — Pivotal Application Service (PAS) | 8.2 | - | 2019-08-19 |
| CVE-2019-10926 | Siemens SIMATIC Ident MV420和Siemens SIMATIC Ident MV440 加密问题漏洞 — SIMATIC MV400 family | 5.3 | - | 2019-06-12 |
| CVE-2019-6540 | 多款Medtronic产品安全漏洞 — Conexus Radio Frequency Telemetry Protocol | 6.5 | Medium | 2019-03-26 |
| CVE-2018-5401 | Auto-Maskin DCU-210E、RP-210E和Marine Pro Observer Android App 安全漏洞 — DCU-210E | 5.9 | - | 2018-10-08 |
| CVE-2018-5402 | Auto-Maskin DCU-210E、RP-210E和Marine Pro Observer Android App 安全漏洞 — DCU-210E | 8.8 | - | 2018-10-08 |
| CVE-2018-8842 | Philips e-Alert 安全漏洞 — e-Alert Unit (non-medical device) | 8.8 | - | 2018-09-26 |
| CVE-2018-14627 | Red Hat WildFly IIOP OpenJDK子系统安全漏洞 — JBoss/WildFly | 5.9 | - | 2018-09-04 |
| CVE-2018-10634 | 多款Medtronic产品信息泄露漏洞 — MMT- 508 - MiniMed pump | 4.8 | Medium | 2018-08-13 |
| CVE-2018-8855 | 多款Echelon产品安全漏洞 — SmartServer 1 | 9.8 | - | 2018-07-24 |
| CVE-2016-5638 | Netgear WNDR4500 信息泄露漏洞 — WNDR4500 | 7.5 | - | 2018-07-24 |
| CVE-2016-5649 | Netgear DGN2200 安全漏洞 — DGN2200 | 9.8 | - | 2018-07-24 |
| CVE-2018-0025 | Juniper SRX Series Junos OS 安全漏洞 — Junos OS | 5.9 | - | 2018-07-11 |
| CVE-2018-8929 | Synology SSL VPN Client 安全漏洞 — SSL VPN Client | 7.4 | - | 2018-07-06 |
CWE-319（敏感数据的明文传输） 是常见的弱点类别，本平台收录该类弱点关联的 453 条 CVE 漏洞。