CWE-922 敏感信息的不安全存储 类弱点 107 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-922属于敏感信息存储不当漏洞，指产品未限制非授权用户对敏感数据的读写权限。攻击者若获取读取权限，可直接窃取机密数据；若获取写入权限，则可篡改或删除数据，导致业务逻辑错误或拒绝服务。开发者应通过实施严格的访问控制列表、加密存储及最小权限原则，确保仅授权主体能访问或修改关键数据，从而有效防范此类风险。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-13954 | ABB多款产品 安全漏洞 — ASPECT-Enterprise | 6.5 | Medium | 2025-05-22 |
| CVE-2025-2440 | Schneider Electric Trio Q Licensed Data Radio 安全漏洞 — Trio Q Licensed Data Radio | 4.2 | Medium | 2025-04-09 |
| CVE-2025-29809 | Microsoft Windows Kerberos 安全漏洞 — Windows 10 Version 1507 | 7.1 | High | 2025-04-08 |
| CVE-2025-2489 | NTFS Tool 安全漏洞 — Ntfs tool | 5.5 | - | 2025-03-18 |
| CVE-2025-2241 | Red Hat Advanced Cluster Management和Red Hat Multicluster Engine 安全漏洞 | 8.2 | High | 2025-03-17 |
| CVE-2025-2157 | Red Hat Satellite 安全漏洞 — Satellite Server | 3.3 | Low | 2025-03-15 |
| CVE-2025-21098 | OpenHarmony 安全漏洞 — OpenHarmony | 5.5 | Medium | 2025-03-04 |
| CVE-2025-22492 | Eaton Foreseer Reporting Software 安全漏洞 — Foreseer Reporting Software (FRS) | 6.3 | Medium | 2025-02-28 |
| CVE-2024-12315 | WordPress plugin Export All Posts 安全漏洞 — Export All Posts, Products, Orders, Refunds & Users | 7.5 | High | 2025-02-12 |
| CVE-2024-55931 | Xerox Workplace Suite 安全漏洞 — Xerox Workplace Suite | 6.5 | Medium | 2025-01-27 |
| CVE-2025-21299 | Microsoft Windows Kerberos 安全漏洞 — Windows 10 Version 1507 | 7.1 | High | 2025-01-14 |
| CVE-2024-37144 | Dell PowerFlex 安全漏洞 — Dell PowerFlex appliance | 8.2 | High | 2024-12-10 |
| CVE-2024-47043 | Ruijie Networks ReyeeOS 安全漏洞 — Reyee OS | 7.5 | High | 2024-12-06 |
| CVE-2024-3334 | Digital Guardian Agent 安全漏洞 — Digital Guardian Agent | 4.3 | Medium | 2024-11-15 |
| CVE-2024-52519 | Nextcloud 安全漏洞 — security-advisories | 2.7 | Low | 2024-11-15 |
| CVE-2022-20939 | Cisco Smart Software Manager On-Prem 安全漏洞 — Cisco Smart Software Manager On-Prem | 4.3 | Medium | 2024-11-15 |
| CVE-2024-3501 | Lunary 信息泄露漏洞 — lunary-ai/lunary | 9.1 | - | 2024-11-14 |
| CVE-2024-10943 | Rockwell Automation FactoryTalk Updater 安全漏洞 — FactoryTalk Updater | 9.1 | Critical | 2024-11-12 |
| CVE-2024-10028 | WordPress plugin Everest Backup 安全漏洞 — Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin | 7.5 | High | 2024-11-05 |
| CVE-2024-10041 | Linux-pam 安全漏洞 | 4.7 | Medium | 2024-10-23 |
| CVE-2023-32191 | rke 安全漏洞 — rke | 9.9 | Critical | 2024-10-16 |
| CVE-2024-43694 | goTenna Pro 安全漏洞 — Pro ATAK Plugin | 4.3 | Medium | 2024-09-26 |
| CVE-2024-47122 | goTenna Pro 安全漏洞 — Pro | 4.3 | Medium | 2024-09-26 |
| CVE-2024-5288 | wolfSSL 安全漏洞 — wolfSSL | 5.1 | Medium | 2024-08-27 |
| CVE-2024-7569 | Ivanti ITSM 安全漏洞 — ITSM | 9.6 | Critical | 2024-08-13 |
| CVE-2024-5598 | WordPress plugin Advanced File Manager 安全漏洞 — Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution | 7.5 | High | 2024-06-29 |
| CVE-2024-29953 | Brocade Fabric OS 安全漏洞 — Fabric OS | 4.3 | Medium | 2024-06-25 |
| CVE-2024-6295 | udn News 安全漏洞 — udn News App | 3.9 | Low | 2024-06-25 |
| CVE-2024-3723 | WordPress plugin Advanced Contact form 7 DB 安全漏洞 — Advanced Contact form 7 DB | 5.3 | Medium | 2024-06-11 |
| CVE-2024-5599 | WordPress plugin FileOrganizer 安全漏洞 — FileOrganizer – WordPress File Manager | 7.5 | High | 2024-06-07 |
CWE-922（敏感信息的不安全存储） 是常见的弱点类别，本平台收录该类弱点关联的 107 条 CVE 漏洞。