CWE-922 敏感信息的不安全存储 类弱点 107 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-922属于敏感信息存储不当漏洞，指产品未限制非授权用户对敏感数据的读写权限。攻击者若获取读取权限，可直接窃取机密数据；若获取写入权限，则可篡改或删除数据，导致业务逻辑错误或拒绝服务。开发者应通过实施严格的访问控制列表、加密存储及最小权限原则，确保仅授权主体能访问或修改关键数据，从而有效防范此类风险。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2022-44581 | WordPress plugin Defender Security 安全漏洞 — Defender Security | 5.0 | Medium | 2024-05-17 |
| CVE-2024-4213 | WordPress plugin Shopping Cart & eCommerce Store 安全漏洞 — Shopping Cart & eCommerce Store | 5.3 | Medium | 2024-05-10 |
| CVE-2024-28132 | F5 BIG-IP 安全漏洞 — BIG-IP Next CNF | 4.4 | Medium | 2024-05-08 |
| CVE-2024-3717 | WordPress plugin Contact Form 7 安全漏洞 — Drag and Drop Multiple File Upload for Contact Form 7 | 5.3 | Medium | 2024-05-02 |
| CVE-2024-29968 | Broadcom Brocade SANnav 安全漏洞 — Brocade SANnav | 7.7 | High | 2024-04-19 |
| CVE-2024-29965 | Broadcom Brocade SANnav 安全漏洞 — Brocade SANnav | 6.8 | Medium | 2024-04-19 |
| CVE-2024-21826 | OpenHarmony 安全漏洞 — OpenHarmony | 4.3 | Medium | 2024-03-04 |
| CVE-2023-6565 | WordPress Plugin InfiniteWP Client plugin for WordPress 安全漏洞 — InfiniteWP Client | 5.9 | Medium | 2024-02-20 |
| CVE-2024-22193 | vantage6 安全漏洞 — vantage6 | 3.5 | Low | 2024-01-30 |
| CVE-2023-5879 | Genie Aladdin Connect Mobile Application 安全漏洞 — Aladdin Connect Mobile Application | 4.6AI | Medium AI | 2024-01-03 |
| CVE-2023-45182 | IBM i 安全漏洞 — i Access Client Solutions | 7.4 | High | 2023-12-14 |
| CVE-2023-45184 | IBM i Access Client Solutions 安全漏洞 — i Access Client Solutions | 6.2 | Medium | 2023-12-14 |
| CVE-2023-6460 | nodejs-firestore 安全漏洞 — nodejs-firestore | 4.0 | Medium | 2023-12-04 |
| CVE-2023-6253 | Digital Guardian Agent 安全漏洞 — Digital Guardian Agent | 7.8AI | High AI | 2023-11-22 |
| CVE-2023-32184 | openSUSE opensuse-welcome 安全漏洞 — opensuse-welcome | 7.8 | High | 2023-09-19 |
| CVE-2023-40728 | Siemens QMS Automotive 安全漏洞 — QMS Automotive | 7.3 | High | 2023-09-12 |
| CVE-2023-37879 | Wing FTP Server 安全漏洞 — Wing FTP Server | 6.5 | Medium | 2023-09-12 |
| CVE-2023-29261 | IBM Sterling Secure Proxy 安全漏洞 — Sterling Secure Proxy | 5.1 | Medium | 2023-09-05 |
| CVE-2023-26427 | Open-Xchange OX App Suite 安全漏洞 — OX App Suite | 3.2 | Low | 2023-06-20 |
| CVE-2023-22687 | WordPress Plugin Freesoul Deactivate Plugins – Plugin manager and cleanup 安全漏洞 — Freesoul Deactivate Plugins – Plugin manager and cleanup | 3.7 | Low | 2023-04-16 |
| CVE-2023-0580 | ABB My Control System 安全漏洞 — My Control System (on-premise) | 5.4 | Medium | 2023-04-06 |
| CVE-2022-2815 | Publify 安全漏洞 — publify/publify | 6.5 | - | 2023-01-14 |
| CVE-2023-22469 | Nextcloud 安全漏洞 — security-advisories | 5.8 | Medium | 2023-01-10 |
| CVE-2022-34354 | IBM Sterling Partner Engagement Manager 安全漏洞 — Partner Engagement Manager | 4.0 | Medium | 2022-11-16 |
| CVE-2022-1021 | chatwoot 跨站脚本漏洞 — chatwoot/chatwoot | 7.6 | - | 2022-08-19 |
| CVE-2022-1044 | Chris Brame Trudesk 安全漏洞 — polonel/trudesk | 5.7 | - | 2022-05-12 |
| CVE-2022-1257 | McAfee Agent 安全漏洞 — McAfee Agent | 6.1 | Medium | 2022-04-14 |
| CVE-2022-0881 | PeerTube 安全漏洞 — chocobozzz/peertube | 6.5 | - | 2022-03-09 |
| CVE-2022-0724 | Microweber 安全漏洞 — microweber/microweber | 7.5 | - | 2022-02-23 |
| CVE-2022-21823 | Ivanti Workspace Control 安全漏洞 — Ivanti Workspace Control | 5.5 | - | 2022-01-07 |
CWE-922（敏感信息的不安全存储） 是常见的弱点类别，本平台收录该类弱点关联的 107 条 CVE 漏洞。