CWE-200: Information Disclosure
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Also known as Exposure of Sensitive Information to an Unauthorized Actor, Information Leak.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...2.5 Low
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...6.3 Medium
- oracle corporation xml gatewayVulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (component: Install). ...7.1 High
- oracle corporation siebel crm integrationVulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open...7.5 High
- oracle corporation bi publisherVulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Publisher...8.5 High
- oracle corporation xml gatewayVulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (component: Install). ...7.1 High
- oracle corporation business intelligence enterprise editionVulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics ...7.7 High
- oracle corporation agile plm mcad connectorVulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component:...5.5 Medium
- oracle corporation agile plm mcad connectorVulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component:...7.3 High
- oracle corporation agile plm mcad connectorVulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component:...5.5 Medium
- oracle corporation commerce guided search / oracle commerce experience managerVulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product...7.1 High
- oracle corporation commerce guided search / oracle commerce experience managerVulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product...7.1 High
- oracle corporation commerce guided search / oracle commerce experience managerVulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product...7.1 High
- oracle corporation application object libraryVulnerability in the Oracle Application Object Library product of Oracle E-Business Suite ...6.5 Medium
- oracle corporation application object libraryVulnerability in the Oracle Application Object Library product of Oracle E-Business Suite ...7.5 High
- oracle corporation order managementVulnerability in the Oracle Order Management product of Oracle E-Business Suite (component:...7.7 High
- hewlett packard enterprise (hpe) edgeconnect sd-wan gateways, arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system +2 moreUnauthenticated Information Disclosure in HPE Networking EdgeConnect SD-WAN Gateways4.3 Medium
- arubanetworks edgeconnect sd-wan orchestrator, hewlett packard enterprise (hpe) edgeconnect sd-wan gateways, hpe edgeconnect operating system +2 moreUnauthenticated Information Disclosure in EdgeConnect SD-WAN Orchestrator API allows exposure of sensitive data5.3 Medium
- hewlett packard enterprise (hpe) edgeconnect sd-wan gateways, arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system +2 moreAuthenticated Information Disclosure in HPE Networking EdgeConnect Enterprise Web-Based Management Interface6.5 Medium
- hewlett packard enterprise (hpe) edgeconnect sd-wan gateways, arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system +2 moreUnauthenticated Adjacent Information Disclosure and Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways7.1 High
- arubanetworks edgeconnect sd-wan orchestrator, hewlett packard enterprise (hpe) edgeconnect sd-wan gateways, hpe edgeconnect operating system +2 moreAuthenticated Sensitive Information Disclosure in HPE Networking EdgeConnect SD-WAN Orchestrator9.9 Critical
- http4sHttp4s: FollowRedirect middleware leaks credentials over https->http same-authority redirect5.9 Medium
- developers italia design-scuole-wordpress-themeMultiple authorization bypass in WordPress theme design-scuole-wordpress-theme8.7 High
- go-vikunja vikunjaVikunja before 2.6.0 Privilege Escalation via Link Share Hash8.7 High
- go-vikunja vikunjaVikunja before 2.6.0 User Enumeration via v2 API5.3 Medium
- go-vikunja vikunjavikunja before 2.6.0 Team Enumeration via Project Share5.3 Medium
- wwbn avideoWWBN AVideo through 29.0 Broken Access Control via Live Endpoints8.7 High
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Networking component4.3 Medium
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Networking: HTTP component7.5 High
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Graphics: ImageLib component6.5 Medium
- unknown wp directory kitWP Directory Kit <= 1.5.7 - Unauthenticated Unpublished Listing Disclosure via map_infowindow5.3 Medium
- unknown wp directory kitWP Directory Kit <= 1.5.7 - Contributor+ Non-Public Listing Field Disclosure via Shortcodes2.7 Low
- iberezansky 3d flipbook – pdf embedder, pdf flipbook viewer, flipbook image gallery3D FlipBook <= 1.16.20 - Unauthenticated Sensitive Information Exposure in 'id' Parameter5.3 Medium
- d-link dir-882D-Link DIR-882 CGI Binary dllog.cgi main information disclosure6.9 Medium
- apple ipados, visionos, ios and ipados +1 more +3 moreA privacy issue was addressed with improved handling of files. This issue is fixed in iOS 27 and...5.5 Medium
- apple ipados, tvos, visionos +3 more +5 moreAn information disclosure issue was addressed with improved state management. This issue is fixed...7.5 High
- apple ipados, macos, tvos +3 more +5 moreThis issue was addressed with improved data protection. This issue is fixed in iOS 26.7 and...5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS...6.5 Medium
- apple ipados, ios and ipados, iphone os +2 moreA privacy issue was addressed with improved handling of user preferences. This issue is fixed in...7.5 High
- apple ipados, macos, tvos +4 more +6 moreThis issue was addressed with improved redaction of sensitive information. This issue is fixed in...3.3 Low
- apple ipados, macos, tvos +4 more +6 moreAn information disclosure issue was addressed with improved state management. This issue is fixed...3.3 Low
- apple macos, watchos +1 moreAn information disclosure issue was addressed with improved state management. This issue is fixed...5.5 Medium
- apple ipados, visionos, ios and ipados +1 more +3 moreA privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.7 and...3.3 Low
- apple ipados, macos, tvos +4 more +6 moreAn information disclosure issue was addressed with improved memory management. This issue is...3.3 Low
- apple ipados, macos, visionos +3 more +5 moreA permissions issue was addressed with additional sandbox restrictions. This issue is fixed in...9.1 Critical
- apple ipados, ios and ipados, iphone os +2 moreA permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and...5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreA permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7...5.5 Medium
- apple macosThis issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS...5.5 Medium
- cosmicstack-labs mercury-agentcosmicstack-labs mercury-agent Shell Permission Manifest permissions.ts PermissionManager.checkShellCommand information disclosure4.8 Medium
- apache software foundation storm nimbus, storm ui +1 moreApache Storm Nimbus, Apache Storm UI: Disclosure of Unredacted Merged Daemon Configuration via the Topology Page6.5 Medium
- Show moreLoading…