CVE-2026-50641CWE-256

Plaintext password storage in Streamsoft Business Intelligence

High · published July 29, 2026

CVSS v4.0
7.1
EPSS
0%
Percentile
14.0
In the wild
Unconfirmed
What it is

Streamsoft Business Intelligence (BI) stores users' passwords in plaintext form in the database

This issue was fixed in version 6.8.0.0, users were also requested to change their password on the first login.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00238 · 14.0th percentile
Weakness
CWE-256 · Plaintext Storage of a Password
Published
2026-07-29T12:37Z
EPSS history
Timeline
  • 29 JUL 12:37Z
    Plaintext password storage in Streamsoft Business Intelligence
    cvelistv5