CWE-209: Generation of Error Message Containing Sensitive Information
The product generates an error message that includes sensitive information about its environment, users, or associated data.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
passbolt/passbolt_apiPackagistPassbolt Api Retrieval of HTTP-only cookies3.7 Low- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morebtrfs: send: handle path ref underflow in header iterate_inode_ref()3.3 Low
- cryptopp crypto\+\+A Fault Injection vulnerability in the SymmetricDecrypt function in cryptopp/elgamal.h of...9.8 Critical
- ibm cognos controllerIBM Cognos Controller information disclosure3.7 Low
- mattermost, mattermost server +1 moreDetailed error discloses full file path with dev mode off4.3 Medium
- ametysAn issue in Ametys CMS v4.5.0 and before allows attackers to obtain sensitive information via...5.3 Medium
- microsoft ole db driver for sql server, ole db driver 18 for sql server, ole db driver 19 for sql server +6 more +8 moreMicrosoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability8.8 High
- linux, linux kernel +1 morespi: spi-fsl-dspi: Fix a resource leak in an error handling path5.5 Medium
- microsoft .net framework, .net framework 2.0 service pack 2, .net framework 3.0 service pack 2 +9 more +11 more.NET Framework Information Disclosure Vulnerability7.5 High
- ibm security verify directoryIBM Security Verify Directory information disclosure2.7 Low
- nway pro, nwaypro +1 moreNway Pro Argument index.php ajax_login_submit_form information exposure5.3 Medium
- hitachi vantara pentaho data integration & analytics, hitachi vantara pentaho data integration and analytics, hitachi vantara pentaho data integration \& analytics +2 moreHitachi Vantara Pentaho Data Integration & Analytics - Server-generated Error Message Containing Sensitive Information5.3 Medium
- apache supersetApache Superset: Improper error handling on alerts4.3 Medium
- drupal, drupal core +1 moreDrupal core Denial of Service vulnerability5.3 Medium
- rapid software llc scada, rapidscada rapid scada +1 moreGeneration of Error Message Containing Sensitive Information in Rapid SCADA5.3 Medium
- seopanel seo panelAn email address enumeration vulnerability exists in the password reset function of SEO Panel...5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series and EX Series: J-Web - unauthenticated access to temporary files containing sensitive information5.3 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 information disclosure5.9 Medium
- apache tomcatApache Tomcat: Leaking of unrelated request bodies in default error page5.3 Medium
- hitachi device managerGeneration of Error Message Containing Sensitive Information Vulnerability in Hitachi Device Manager5.3 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreWindows TCP/IP Information Disclosure Vulnerability5.3 Medium
- redhat red hat developer hub, linuxfoundation backstage, red hat rhdh-1.1-rhel-9 +2 moreRhdh: catalog-import function leaks credentials to frontend5.7 Medium
- hcl software dryice myxalyticsImproper Error Handling affects DRYiCE MyXalytics3.1 Low
- hcl software launch, hcltechsw hcl launch +1 moreHCL Launch is susceptible to sensitive information disclosure4.3 Medium
- netapp ontap mediatorCVE-2023-27319 Information Disclosure Vulnerability in ONTAP Mediator5.3 Medium
- ibm security guardium key lifecycle managerIBM Security Guardium Key Lifecycle Manager information disclosure5.3 Medium
- ibm urbancode deployIBM UrbanCode Deploy information disclosure5.3 Medium
- wso2 api managerDue to improper error handling, a REST API resource could expose a server side error containing...5.3 Medium
- kaifa technology webitr, kaifa webitr attendance system +1 moreKaifa Technology WebITR - Error Message Leakage4.3 Medium
- ibm system storage virtualization engine, virtualization engine ts7760 3957-vec firmware, virtualization engine ts7770 3948-ved firmware +1 more +3 moreIBM System Storage Virtualization Engine information disclosure4.3 Medium
- jupyter server, jupyter-server jupyter server +1 moreJupyter Server errors include tracebacks with path information3.5 Low
- ibm infosphere information serverIBM InfoSphere Information Server information disclosure5.3 Medium
- pimcore admin-ui-classic-bundle, admin classic bundle +1 moreFull Path Disclosure via re-export document in pimcore/admin-ui-classic-bundle5.3 Medium
- hitachi energy esomsThe response messages received from the eSOMS report generation using certain parameter queries...5.3 Medium
- codeigniter, codeigniter4 +1 moreCodeIgniter4 vulnerable to information disclosure when detailed error report is displayed in production environment7.5 High
- ibm security verify privilege, security verify privilege on-premises +1 moreIBM Security Verify Privilege information disclosure2.7 Low
- unknown defender securityDefender Security < 4.1.0 - Protection Bypass (Hidden Login Page)5.3 Medium
- unknown vrm 360 3d model viewer, maurice vrm360 +1 moreVrm 360 3D Model Viewer <= 1.2.1 - Full Path Disclosure5.3 Medium
- grafana google sheets, google-sheets-datasource +1 moreGoogle Sheets data source plugin for Grafana information disclosure vulnerability5.5 Medium
- sap s\/4hana, sap se s/4hana core +1 moreInformation Disclosure Vulnerability in Statutory Reporting4.3 Medium
- sap business one, sap se business one (b1i) +1 moreInformation Disclosure vulnerability in SAP Business One (B1i)4.3 Medium
- redhat a-mq streams, squareup okhttp, red hat amq streams 2.2.1 +1 more +3 moreRed hat a-mq streams: component version with information disclosure flaw4.7 Medium
- juplink rx4-1500, rx4-1500 firmware +1 moreJuplink RX4-1500 Credential Disclosure Vulnerability8.0 High
- siemens qms automotiveA vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected...4.0 Medium
- sap businessobjects business intelligence, sap se businessobjects business intelligence platform (version management system) +1 moreInformation Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Version Management System)5.3 Medium
- apache supersetApache Superset: Stack traces enabled by default4.3 Medium
- open automation software oas platformAn information disclosure vulnerability exists in the OAS Engine configuration management...3.1 Low
- ibm security verify information queueIBM Security Verify Information Queue information disclosure4.3 Medium
- ibm security verify information queueIBM Security Verify Information Queue information disclosure4.3 Medium
- ibm guardium cloud key managerIBM Security Guardium Data Encryption information disclosure5.3 Medium
- Show moreLoading…