CWE-200: Information Disclosure
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Also known as Exposure of Sensitive Information to an Unauthorized Actor, Information Leak.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- oracle corporation peoplesoft enterprise cs campus community, oracle peoplesoft enterprise campus software campus community +1 moreVulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft ...5.9 Medium
- oracle corporation peoplesoft enterprise cs campus community, oracle peoplesoft enterprise campus software campus community +1 moreVulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft ...6.5 Medium
- oracle peoplesoft enterprise cs financial aidVulnerability in the PeopleSoft Enterprise CS Financial Aid product of Oracle PeopleSoft ...5.5 Medium
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component:...8.1 High
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component:...6.5 Medium
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component:...8.6 High
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component:...9.8 Critical
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component:...7.5 High
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component:...8.7 High
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component:...9.9 Critical
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component:...9.8 Critical
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component:...8.6 High
- oracle soa suiteVulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration...7.7 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...7.1 High
- oracle service delivery platformVulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component:...7.7 High
- oracle http serverVulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod_proxy...8.6 High
- oracle timesten in-memory databaseVulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database ...4.3 Medium
- oracle timesten in-memory databaseVulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database ...3.8 Low
- oracle goldengateVulnerability in Oracle GoldenGate (component: Admin Server Executable). Supported versions...4.3 Medium
- oracle goldengateVulnerability in Oracle GoldenGate (component: Admin Server Executable). Supported versions that...5.3 Medium
- oracle jdeveloperVulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Data...3.7 Low
- oracle jdeveloperVulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces)...3.7 Low
- oracle jdeveloperVulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces)...6.5 Medium
- oracle jdeveloperVulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Java...5.9 Medium
- oracle project manufacturingVulnerability in the Oracle Project Manufacturing product of Oracle E-Business Suite (component:...3.1 Low
- oracle data integratorVulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component:...3.3 Low
- oracle mysql cluster, mysql server +1 moreVulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X...8.2 High
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...4.3 Medium
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...9.8 Critical
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS -...8.6 High
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...5.3 Medium
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...5.9 Medium
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...9.8 Critical
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...5.3 Medium
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...5.3 Medium
- oracle paymentsVulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File...7.1 High
- oracle hospitality simphonyVulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications...7.5 High
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...3.2 Low
- oracle apexVulnerability in Oracle APEX (component: General). Supported versions that are affected are 24.1...5.3 Medium
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...3.2 Low
- oracle siebel crm, oracle corporation siebel crm integration +1 moreVulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Event...1.9 Low
- oracle corporation agile plm, oracle agile product lifecycle management +1 moreVulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files &...6.5 Medium
- gitea open source git serverOIDC userinfo Endpoint Returns Identity Claims Without Enforcing API Token Scopes9.1 Critical
- gitea open source git serverPrivate Repository Metadata Remains Accessible After Access Revocation7.5 High
- gitea open source git serverREST API exposes organization membership of private organizations to public7.5 High
- gitea open source git serverRSS/Atom feed handlers bypass API-token scope & public-only confinement (incomplete fix of #37698)4.3 Medium
- gitea open source git serverRepository migration SSRF via multi-answer DNS allow-list bypass6.5 Medium
- gitea open source git serverPrivate Repository Existence Disclosure via go-get Meta Endpoint5.3 Medium
- gitea open source git serverOAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation)4.3 Medium
- gitea open source git serverMissing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an Unauthorized Actor in c…5.9 Medium
- Show moreLoading…