The department learnt after an internal review several months ago that its Consular Consolidated Database (CCD) was at risk of being compromised, though no breach had been detected, the report said.
The CCD holds current and archived visa records and data, including names, photos, addresses, biometric data and identification numbers from the Bureau of Consular Affairs and is key to processing passport applications for visa applicants and travellers.
There was no evidence that a cyber-security incident had occurred pertaining to the CCD, a State Department spokesperson said in an emailed statement.
The vulnerabilities stemmed from ageing "legacy" computer systems that comprise the CCD, the ABC News report said.
An official associated with the department's efforts to address the security concerns said a mitigation plan had already fixed the visa-related vulnerabilities, and further steps were being taken, ABC News said.
However, the report said other government sources were sceptical that the CCD's security vulnerabilities had all been resolved, and there was no defined timeline for fixing them.
© Thomson Reuters 2016
For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.