NIST 800-53 r5 · Controls catalogue · Family SC
SC-9Transmission Confidentiality
Transmission Confidentiality
Last updated: 04 July 2026 00:28 UTC
Implementations targeting this control (0)
- No implementations targeting this control yet.
ATT&CK techniques this control mitigates (0)
- No ATT&CK techniques mapped to this control yet.
Weaknesses this control addresses (4)AI
CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.
| CWE | Name | CVEs | Why this control addresses it |
|---|---|---|---|
CWE-319 | Cleartext Transmission of Sensitive Information | 1,076 | Directly prevents cleartext transmission of sensitive information by requiring encryption or equivalent confidentiality protections during transit. |
CWE-598 | Use of HTTP Request With Sensitive Query String | 80 | Protects sensitive data placed in query strings from interception in transit when confidentiality controls like HTTPS are enforced. |
CWE-300 | Channel Accessible by Non-Endpoint | 54 | Renders the transmission channel inaccessible to non-endpoint eavesdroppers through encryption, eliminating the weakness class. |
CWE-523 | Unprotected Transport of Credentials | 23 | Prevents unprotected transport of credentials by mandating confidentiality mechanisms such as TLS for all sensitive data flows. |
Top CVEs where this control is the strongest mitigation
| CVE | Risk | CVSS | EPSS | Match |
|---|---|---|---|---|
CVE-2025-70048 | 5.5 | 7.5 | 0.0019 | good |
CVE-2024-44276 | 5.5 | 7.3 | 0.0024 | good |
CVE-2025-10174 UPD | 5.5 | 8.3 | 0.0012 | good |
CVE-2026-23661 | 5.5 | 7.5 | 0.0070 | good |
CVE-2025-13718 | 1.5 | 3.7 | 0.0018 | good |
CVE-2024-36558 | 5.5 | 7.5 | 0.0014 | good |