CWE-5
J2EE Misconfiguration: Data Transmission Without Encryption
Information sent over a network can be compromised while in transit. An attacker may be able to read or modify the contents if the data are sent in plaintext or are weakly encrypted.
Impactr finds and proves whether CWE-5 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.