Cyber Resilience

CWE · MITRE source

CWE-319Cleartext Transmission of Sensitive Information

Abstraction: Base · CVEs in our corpus: 904

The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

Last updated: 20 August 2026 20:22 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: partial · 4 mapping(s) from 1 framework(s): CAPEC 4 (partial)

See the full cumulative-coverage rollup →

OWASP Top 10 for Web (2025)

This weakness contributes to A04:2025 Cryptographic Failures.

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent
Stop it (NIST 800-53 / CSF Protect)
  • SC-12 Cryptographic Key Establishment and Management
  • SC-13 Cryptographic Protection
  • SC-19 Voice Over Internet Protocol
  • SC-23 Session Authenticity
Detect
Catch it (CSF Detect / Respond)

—

Harden
Shrink the surface (DISA STIG)

—

Validate
Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (15)AI-assisted

Showing the 10 most specific. Generic controls that address many weakness types are collapsed below.

Control Title Family Why it addresses this CWE
SC-12Cryptographic Key Establishment and ManagementSCKey-establishment procedures specify secure distribution channels that preclude cleartext transmission of key material.
SC-13Cryptographic ProtectionSCRequires cryptography for transmission uses, eliminating cleartext exposure of sensitive data in transit.
SC-19Voice Over Internet ProtocolSCUsage restrictions and technology-specific guidance routinely mandate encryption (SRTP, TLS) for voice streams that carry sensitive information.
CM-13Data Action MappingCMMapping transmission actions in data flows helps prevent cleartext transmission of sensitive information.
CM-6Configuration SettingsCMSettings can enforce secure transmission protocols to prevent cleartext transmission of sensitive data.
AT-3Role-based TrainingATRole-based training covers secure transmission methods, mitigating cleartext transmission of sensitive data.
CA-3Information ExchangeCABy requiring documented security controls for information exchanges, the control reduces the risk of cleartext transmission of sensitive data.
MP-1Policy and ProceduresMPPolicy addresses secure transport and handling of media to avoid cleartext transmission of sensitive information.
PM-17Protecting Controlled Unclassified Information on External SystemsPMEnforces safeguards against cleartext transmission of CUI when data leaves organizational boundaries to external systems.
SA-9External System ServicesSAExplicit controls and continuous oversight on external system services prevent cleartext transmission of sensitive information over provider-managed channels.
Show 5 more broadly-applicable controls
SC-23Session AuthenticitySCEliminates cleartext exposure of session identifiers or tokens that would allow hijacking.
SC-37Out-of-band ChannelsSCSensitive values are moved off the primary channel, avoiding cleartext transmission risks associated with that channel.
SC-40Wireless Link ProtectionSCMandates cryptographic protection of the wireless medium, eliminating cleartext transmission of sensitive information over the air.
SC-8Transmission Confidentiality and IntegritySCThe control explicitly requires confidentiality protection for transmitted information, preventing cleartext exposure of sensitive data.
SC-9Transmission ConfidentialitySCDirectly prevents cleartext transmission of sensitive information by requiring encryption or equivalent confidentiality protections during transit.

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2024-25735 8.99.10.50622024-03-27
CVE-2016-5649 8.79.80.24432018-07-24
CVE-2018-12710 8.68.00.76512018-08-29
CVE-2017-5259 8.38.80.39182017-12-20
CVE-2018-1297 8.29.80.09912018-02-13
CVE-2019-3993 7.87.50.45702019-12-17
CVE-2021-20623 7.89.80.02822021-02-05
CVE-2019-12503 7.79.80.02002019-12-02
CVE-2015-0987 7.610.00.01172015-10-06
CVE-2019-17393 7.69.80.01842019-10-18
CVE-2019-18852 7.69.80.01542019-11-11
CVE-2019-16672 7.69.80.01282019-12-06
CVE-2020-6198 7.69.80.01382020-03-10
CVE-2020-5594 7.69.80.01302020-06-23
CVE-2022-21829 7.69.80.01722022-06-24
CVE-2023-25437 7.68.80.14112023-04-27
CVE-2023-6248 7.610.00.01222023-11-21
CVE-2018-7259 7.59.80.01002018-02-20
CVE-2019-6526 7.59.80.01002019-04-15
CVE-2019-3793 7.59.80.01052019-04-24
CVE-2018-11421 7.59.80.00912019-07-03
CVE-2018-11422 7.59.80.01022019-07-03
CVE-2020-9477 7.59.80.01262020-03-04
CVE-2020-10376 7.59.80.01062020-03-11
CVE-2020-11542 7.59.80.00982020-04-04