Threats Tagged 'cwe-316'

Cleartext Storage of Sensitive Information in Memory vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component. This issue affects Meona Client Launcher Component: through 19.06.2020 15:11:49; Meona Server Component: through 2025.04 5+323020.

In SAP Business One, sensitive information is written to the application�s memory dump files without obfuscation. Gaining access to this information could potentially lead to unauthorized operations within the B1 environment, including modification of company data. This issue results in a high impact on confidentiality and integrity, with no impact on availability.

MediumVulnerabilityUnited StatesGermanyIndia+7#cve#cve-2026-24319#cwe-316

A sensitive information disclosure vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to retrieve sensitive data from Prisma Browser. Browser self-protection should be enabled to mitigate this issue.

MediumVulnerabilityGermanyFranceUnited Kingdom+7#cve#cve-2025-4618#cwe-316

SAP GUI for Windows may allow a highly privileged user on the affected client PC to locally access sensitive information stored in process memory during runtime.This vulnerability has a high impact on confidentiality, with no impact on integrity and availability.

MediumVulnerabilityGermanyFranceUnited Kingdom+4#cve#cve-2025-42888#cwe-316

CVE-2025-9970 is a medium severity vulnerability in ABB MConfig up to version 1. 4. 9. 21, involving cleartext storage of sensitive information in memory. This weakness (CWE-316) could potentially expose sensitive data during runtime. The vulnerability requires local access with high attack complexity and privileges, and user interaction is needed for exploitation. No known exploits are reported in the wild. There is no information about an available patch or official remediation from the vendor at this time.

Emerson ValveLink Products store sensitive information in cleartext within a resource that might be accessible to another control sphere.

HighVulnerabilityGermanyFranceUnited Kingdom+6#cve#cve-2025-50109#cwe-316

Emerson ValveLink Products store sensitive information in cleartext in memory. The sensitive memory might be saved to disk, stored in a core dump, or remain uncleared if the product crashes, or if the programmer does not properly clear the memory before freeing it.

CriticalVulnerabilityGermanyFranceUnited Kingdom+7#cve#cve-2025-52579#cwe-316

The TeleMessage service through 2025-05-05 stores certain cleartext information in memory, even though memory content may be accessible to an adversary through various avenues.

LowVulnerabilityGermanyFranceNetherlands+4#cve#cve-2025-48930#cwe-316