CWE-319 敏感数据的明文传输 类弱点 411 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-319 指敏感信息在通信过程中以明文形式传输，易被网络嗅探。攻击者通常利用中间人攻击或公共 Wi-Fi 环境截获数据，窃取凭证或隐私。开发者应避免使用 HTTP 等未加密协议，强制实施 TLS/SSL 加密传输，并对关键数据进行端到端加密，确保即使数据被拦截也无法被解读，从而保障通信安全。
try { URL u = new URL("http://www.secret.example.org/"); HttpURLConnection hu = (HttpURLConnection) u.openConnection(); hu.setRequestMethod("PUT"); hu.connect(); OutputStream os = hu.getOutputStream(); hu.disconnect(); } catch (IOException e) { //... }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-0556 | Progress Telerik Report Server 安全漏洞 — Telerik Report Server | 8.8 | High | 2025-02-12 |
| CVE-2024-43187 | IBM Security Verify Access 安全漏洞 — Security Verify Access Appliance | 5.9 | Medium | 2025-02-04 |
| CVE-2023-35017 | IBM Security Verify Governance 安全漏洞 — Security Verify Governance | 5.9 | Medium | 2025-01-29 |
| CVE-2025-0784 | Intelbras InControl 安全漏洞 — InControl | 3.7 | Low | 2025-01-28 |
| CVE-2025-0631 | Rockwell Automation PowerFlex 755 安全漏洞 — PowerFlex 755 | 7.5 | - | 2025-01-28 |
| CVE-2025-0432 | HMS EWON FLEXY 202 安全漏洞 — Ewon Flexy 202 | 5.7 | Medium | 2025-01-28 |
| CVE-2024-28786 | IBM QRadar SIEM 安全漏洞 — QRadar SIEM | 6.5 | Medium | 2025-01-27 |
| CVE-2024-41757 | IBM Concert 安全漏洞 — Concert Software | 5.9 | Medium | 2025-01-24 |
| CVE-2024-26155 | ETIC Telecom Remote Access Server 安全漏洞 — Remote Access Server (RAS) | 6.8 | Medium | 2025-01-17 |
| CVE-2024-45102 | Lenovo XClarity Administrator 安全漏洞 — XClarity Administrator | 6.8 | Medium | 2025-01-14 |
| CVE-2024-42181 | HCL DRYiCE MyXalytics 安全漏洞 — DRYiCE MyXalytics | 1.6 | Low | 2025-01-12 |
| CVE-2024-11946 | iXsystems TrueNAS CORE 安全漏洞 — TrueNAS CORE | 8.1 | - | 2024-12-30 |
| CVE-2021-39081 | IBM Cognos Analytics Mobile 安全漏洞 — Cognos Analytics Mobile for Android | 5.9 | Medium | 2024-12-19 |
| CVE-2024-10973 | Red Hat Keycloak 安全漏洞 | 5.7 | Medium | 2024-12-17 |
| CVE-2024-49820 | IBM Security Guardium Key Lifecycle Manager 安全漏洞 — Security Guardium Key Lifecycle Manager | 3.7 | Low | 2024-12-17 |
| CVE-2024-49819 | IBM Security Guardium Key Lifecycle Manager 安全漏洞 — Security Guardium Key Lifecycle Manager | 4.1 | Medium | 2024-12-17 |
| CVE-2024-53246 | Splunk Cloud Platform和Splunk Enterprise 安全漏洞 — Splunk Enterprise | 5.3 | Medium | 2024-12-10 |
| CVE-2024-47577 | SAP Commerce Cloud 安全漏洞 — SAP Commerce Cloud | 2.7 | Low | 2024-12-10 |
| CVE-2024-6515 | ABB ASPECT 安全漏洞 — ASPECT-Enterprise | 9.6 | Critical | 2024-12-05 |
| CVE-2021-29892 | IBM Cognos Controller 安全漏洞 — Cognos Controller | 5.9 | Medium | 2024-12-03 |
| CVE-2024-9834 | Baxter Life2000 安全漏洞 — Life2000 Ventilation System | 9.3 | Critical | 2024-11-14 |
| CVE-2024-32946 | LevelOne WBR-6012 安全漏洞 — WBR-6012 | 5.9 | Medium | 2024-10-30 |
| CVE-2024-8013 | MongoDB mongocryptd和MongoDB Mongo_crypt_v1.so 安全漏洞 — mongocryptd | 2.2 | Low | 2024-10-28 |
| CVE-2024-49387 | Acronis Cyber Protect 安全漏洞 — Acronis Cyber Protect 16 | 7.5 | - | 2024-10-15 |
| CVE-2024-9620 | Red Hat Ansible Automation Platform 安全漏洞 | 5.3 | Medium | 2024-10-08 |
| CVE-2024-47789 | D3D Security IP Camera 安全漏洞 — IP Camera D8801 | 7.5 | - | 2024-10-04 |
| CVE-2024-45838 | goTenna Pro 安全漏洞 — Pro ATAK Plugin | 4.3 | Medium | 2024-09-26 |
| CVE-2024-47124 | goTenna pro 安全漏洞 — Pro | 4.3 | Medium | 2024-09-26 |
| CVE-2024-45101 | Lenovo XClarity Administrator 安全漏洞 — XClarity Administrator | 6.8 | Medium | 2024-09-13 |
| CVE-2024-8059 | Lenovo XClarity Controller 安全漏洞 — HX5530 Appliance (ThinkAgile) XCC | 4.3 | Medium | 2024-09-13 |
CWE-319（敏感数据的明文传输） 是常见的弱点类别，本平台收录该类弱点关联的 411 条 CVE 漏洞。