Skip to content
OpenAdvisories

Weakness (CWE)

CWE-5: J2EE Misconfiguration: Data Transmission Without Encryption

Variant Draft

The product uses J2EE with a configuration that transmits data without encryption.

How to prevent it (1 mitigation)

  1. System Configuration

    The product configuration should ensure that SSL or an encryption mechanism of equivalent strength and vetted reputation is used for all access-controlled pages.

Source: MITRE CWE-5

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2025-52435

    Apache Mynewt NimBLE: Invalid error handling in pause encryption procedure in NimBLE controller

    J2EE Misconfiguration: Data Transmission Without Encryption vulnerability in Apache NimBLE. Improper handling of Pause Encryption procedure on Link Layer results in a previously encrypted connection being left in un-encrypted state allowing an eavesdropper to…

    Apache Software Foundation Apache Mynewt NimBLE
  • High 7.5
    CVE-2025-65297

    Aqara Hub devices including Camera Hub G3 4.1.9_0027, Hub M2 4.3.6_0027, and Hub M3 4.3.6_0025 automatically collect an…