← Back
CWE-525

30 CVEs • Abstraction: Variant

Use of Web Browser Cache Containing Sensitive Information

The web application does not use an appropriate caching policy that specifies the extent to which each web page and associated form fields should be cached.

JSON object

Loading...

CVEs (30)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Hcltech
1Nomad Server On Domino
Jun 17, 2026
Jul 19, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
HCL Nomad server on Domino is vulnerable to the cache containing sensitive information which could potentially give an attacker the ability to acquire the sensitive information.
1Ibm
2Cloud Pak For Security
Qradar Suite
Jun 17, 2026
Jun 28, 2024
N/A· v4
3.3 LOW· v3
N/A· v2
IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Software Suite 1.10.12.0 through 1.10.21.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force I...Show more
IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Software Suite 1.10.12.0 through 1.10.21.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 233673.Show less
1Apache
1Airflow
Jun 17, 2026
Jun 14, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow.  Airflow did not return "Cache-Control" header for dynamic content, which in case of some browsers could result in potentially s...Show more
Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow.  Airflow did not return "Cache-Control" header for dynamic content, which in case of some browsers could result in potentially storing sensitive data in local cache of the browser. This issue affects Apache Airflow: before 2.9.2. Users are recommended to upgrade to version 2.9.2, which fixes the issue. Show less
1Ibm
2Maximo Application Suite
Maximo Asset Management
Jun 17, 2026
Jun 13, 2024
N/A· v4
3.3 LOW· v3
N/A· v2
IBM Maximo Asset Management 7.6.1.3 and IBM Maximo Application Suite 8.10 and 8.11 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 279973.
1Ibm
1Aspera Console
Jun 17, 2026
May 30, 2024
N/A· v4
3.3 LOW· v3
N/A· v2
IBM Aspera Console 3.4.0 through 3.4.2 PL9 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 239078.
1Ibm
1Txseries For Multiplatform
Jun 17, 2026
May 14, 2024
N/A· v4
3.3 LOW· v3
N/A· v2
IBM TXSeries for Multiplatforms 8.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 280190.
1Ibm
1Sterling Secure Proxy
Jun 17, 2026
Mar 15, 2024
N/A· v4
3.3 LOW· v3
N/A· v2
IBM Sterling Secure Proxy 6.0.3 and 6.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 269686.
1Ibm
1Cloud Pak For Data
Jun 17, 2026
Feb 29, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
IBM Watson CloudPak for Data Data Stores information disclosure 4.6.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 248947.
1Ibm
1Cloud Pak For Business Automation
Jun 17, 2026
Feb 1, 2023
N/A· v4
3.3 LOW· v3
N/A· v2
IBM ICP4A - Automation Decision Services 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 allows web pages to be stored locally which can be read by anot...Show more
IBM ICP4A - Automation Decision Services 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 244504. Show less
1Mendix
1Mendix
Jun 17, 2026
Nov 9, 2021
N/A· v4
5.5 MEDIUM· v3
1.9 LOW· v2
A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.26), Mendix Applications using Mendix 8 (All versions < V8.18.12), Mendix Applications using Mendix 9 (All versions < V9.6.1...Show more
A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.26), Mendix Applications using Mendix 8 (All versions < V8.18.12), Mendix Applications using Mendix 9 (All versions < V9.6.1). Applications built with affected versions of Mendix Studio Pro do not prevent file documents from being cached when files are opened or downloaded using a browser. This could allow a local attacker to read those documents by exploring the browser cache.Show less