--- title: "CWE-255: Credentials Management Errors" url: https://radicalnotion.ai/cwe/cwe-255 type: cwe description: "Weaknesses in this category are related to the management of credentials." updated: 2026-05-01 source: RadicalNotion.AI license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/) --- # CWE-255: Credentials Management Errors - **Status:** Draft - **CVEs with this as primary weakness:** 719 - **Of those, in CISA KEV:** 0 - **New in 2026:** 2 - **CWE catalog version:** 4.20 ## Description Weaknesses in this category are related to the management of credentials. ## Real CVEs with this weakness (sample of 12 of 719) | CVE | Title | Severity | CVSS | EPSS | CISA KEV | Published | | --- | --- | --- | --- | --- | --- | --- | | CVE-2016-0898 | - | critical | 10.0 | - | No | 2018-03-29 | | CVE-2015-7906 | - | critical | 10.0 | - | No | 2015-12-21 | | CVE-2015-7856 | - | critical | 10.0 | - | No | 2015-10-16 | | CVE-2010-5308 | - | critical | 10.0 | - | No | 2015-08-04 | | CVE-2011-5324 | - | critical | 10.0 | - | No | 2015-08-04 | | CVE-2012-6660 | - | critical | 10.0 | - | No | 2015-08-04 | | CVE-2002-2446 | - | critical | 10.0 | - | No | 2015-08-04 | | CVE-2001-1594 | - | critical | 10.0 | - | No | 2015-08-04 | | CVE-2011-5322 | - | critical | 10.0 | - | No | 2015-08-04 | | CVE-2009-5143 | - | critical | 10.0 | - | No | 2015-08-04 | | CVE-2011-5323 | - | critical | 10.0 | - | No | 2015-08-04 | | CVE-2012-6694 | - | critical | 10.0 | - | No | 2015-08-04 | ## Frequently asked questions ### What is CWE-255? Weaknesses in this category are related to the management of credentials. ### What CVEs are caused by CWE-255? 719 recorded CVEs are attributed to CWE-255, including CVE-2016-0898, CVE-2015-7906 and CVE-2015-7856. ### Is CWE-255 actively exploited? 719 recorded CVEs are caused by CWE-255; none are currently in CISA's KEV catalog of actively exploited flaws. Primary source: [MITRE CWE](https://cwe.mitre.org/data/definitions/255.html) --- Source: [RadicalNotion.AI](https://radicalnotion.ai/cwe/cwe-255). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.