CWE · MITRE source
CWE-525Use of Web Browser Cache Containing Sensitive Information
The web application does not use an appropriate caching policy that specifies the extent to which each web page and associated form fields should be cached.
Last updated: 20 August 2026 13:14 UTC
Cumulative inbound coverage
How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.
Collective: partial · 1 mapping(s) from 1 framework(s): CAPEC 1 (partial)
OWASP Top 10 for Web (2025)
This weakness contributes to A06:2025 Insecure Design.
Control responseHuman-reviewed
Answering this weakness across the control lifecycle, from our framework cross-walks.
Prevent
Stop it (NIST 800-53 / CSF Protect)
PR.PS-01PR.PS-06SC-8Transmission Confidentiality and Integrity
Detect
Catch it (CSF Detect / Respond)
—
Harden
Shrink the surface (DISA STIG)
—
Validate
Prove the fix (OWASP ASVS)
V14.2.5V14.3.2
NIST 800-53 r5 controls that address this weakness (0)AI-assisted
| Control | Title | Family | Why it addresses this CWE |
|---|---|---|---|
| No NIST controls proposed yet. | |||
Top CVEs of this weakness type, ranked by Risk Priority
| CVE | Risk | CVSS | EPSS | Published |
|---|---|---|---|---|
CVE-2025-15554 UPD | 5.6 | 7.8 | 0.0014 | 2026-03-16 |
CVE-2026-13697 | 5.6 | 7.4 | 0.0032 | 2026-07-29 |
CVE-2026-27514 | 4.9 | 6.5 | 0.0022 | 2026-02-23 |
CVE-2024-31906 UPD | 4.7 | 6.2 | 0.0018 | 2025-01-26 |
CVE-2025-36364 UPD | 4.6 | 6.2 | 0.0010 | 2026-03-03 |
CVE-2026-41918 UPD | 4.4 | 5.7 | 0.0019 | 2026-06-02 |
CVE-2024-25142 UPD | 4.3 | 5.5 | 0.0032 | 2024-06-14 |
CVE-2026-41322 | 4.3 | 5.3 | 0.0024 | 2026-04-24 |
CVE-2021-42015 UPD | 4.2 | 5.5 | 0.0022 | 2021-11-09 |
CVE-2026-24437 | 4.2 | 5.5 | 0.0015 | 2026-01-26 |
CVE-2025-62276 UPD | 4.1 | 5.5 | 0.0013 | 2025-11-01 |
CVE-2024-23571 | 3.5 | 4.3 | 0.0018 | 2026-07-17 |
CVE-2023-23469 UPD | 3.3 | 4.0 | 0.0018 | 2023-02-01 |
CVE-2023-27545 UPD | 3.3 | 4.0 | 0.0019 | 2024-02-29 |
CVE-2023-46181 UPD | 3.3 | 4.0 | 0.0018 | 2024-03-15 |
CVE-2024-22343 UPD | 3.3 | 4.0 | 0.0022 | 2024-05-14 |
CVE-2022-43841 UPD | 3.3 | 4.0 | 0.0016 | 2024-05-30 |
CVE-2022-38383 UPD | 3.3 | 4.0 | 0.0017 | 2024-06-28 |
CVE-2024-22349 UPD | 3.3 | 4.0 | 0.0021 | 2025-01-20 |
CVE-2023-43035 UPD | 3.3 | 4.0 | 0.0015 | 2025-04-10 |
CVE-2025-1334 UPD | 3.3 | 4.0 | 0.0016 | 2025-06-03 |
CVE-2024-30130 UPD | 3.2 | 3.7 | 0.0029 | 2024-07-19 |
CVE-2025-1348 UPD | 3.2 | 4.0 | 0.0013 | 2025-06-18 |
CVE-2025-36082 UPD | 3.2 | 4.0 | 0.0013 | 2025-09-15 |
CVE-2025-13083 UPD | 3.2 | 3.7 | 0.0026 | 2025-11-18 |