CWE-209: Generation of Error Message Containing Sensitive Information
The product generates an error message that includes sensitive information about its environment, users, or associated data.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 moreWordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Sensitive Data Exposure vulnerability4.3 Medium
- hcl software travelerHCL Traveler is affected by generation of error messages containing sensitive information4.3 Medium
- api-platform coreAPI Platform Core can leak exceptions message that may contain sensitive information5.3 Medium
- google androidIn contentDescForNotification of NotificationContentDescription.kt, there is a possible...5.5 Medium
- ibm infosphere information serverIBM InfoSphere Information Server information disclosure2.7 Low
- jetbrains teamcityIn JetBrains TeamCity before 2025.03 exception could lead to credential leakage on Cloud Profiles...2.7 Low
- gitlabGeneration of Error Message Containing Sensitive Information in GitLab4.4 Medium
- hillstone networks next generation firewallAbsolute Path Disclosure Vulnerability in Hillstone Next Generation FireWall5.3 Medium
- sap se business objects business intelligence platformInformation Disclosure in SAP Business Objects Business Intelligence Platform4.1 Medium
- gmod apolloGMOD Apollo Generation of Error Message Containing Sensitive Information6.9 Medium
- ibm entirexIBM EntireX information disclosure3.3 Low
- ibm entirexIBM EntireX information disclosure3.3 Low
- ibm entirexIBM EntireX information disclosure3.3 Low
- ibm entirexIBM EntireX information disclosure3.3 Low
- ibm entirexIBM EntireX information disclosure3.3 Low
- ibm entirexIBM EntireX information disclosure3.3 Low
- ibm entirexIBM EntireX information disclosure3.3 Low
- beckman coulter life sciences met one 3400+MET ONE 3400+ Potential Credential Exposure5.8 Medium
- covertnine c9 blocksC9 Blocks <= 1.7.7 - Unauthenticated Full Path Disclosure5.3 Medium
- marcoingraiti actionwear products syncActionwear products sync <= 2.3.2 - Unauthenticated Full Patch Disclosure5.3 Medium
- byconsole wooodt lite, mdalabar wooodt lite – delivery & pickup date time location for woocommerce +1 moreWooODT Lite – Delivery & pickup date time location for WooCommerce <= 2.5.1 - Unauthenticated Full Path Dsiclosure5.3 Medium
- bigbuy dropshipping connector for woocommerce, devsmip bigbuy dropshipping connector for woocommerce +1 moreBigBuy Dropshipping Connector for WooCommerce <= 2.0.0 - Unauthenticated Full Path Disclosute5.3 Medium
- vividcolorsjp aforms eatsAForms Eats <= 1.3.1 - Unauthenticated Full Path Disclosure5.3 Medium
- solarwinds platformSolarWinds Platform Information Disclosure Vulnerability3.5 Low
- ibm entirexIBM EntireX information disclosure3.3 Low
- ibm applinxIBM ApplinX Information Disclosure4.3 Medium
- ibm security verify access appliance, security verify access, security verify access container +2 moreIBM Security Verify Access information disclosure2.7 Low
- ibm security verify access appliance, security verify access, security verify access container +1 more +3 moreIBM Security Verify Access information disclosure5.3 Medium
org.openmrs.module:addresshierarchyMaven,org.openmrs.module:attachmentsMaven,org.openmrs.module:idgenMaven +3 more +5 moreGeneral OpenMRS Security Advisory, January 2025: Penetration Testing Results and PatchesNo score- argoproj argo cd, argo-cd +1 moreArgo CD does not scrub secret values from patch errors6.8 Medium
- vmware aria operations for logs, cloud foundation +1 moreVMware Aria Operations for Logs information disclosure vulnerability8.5 High
- ibm analytics content hubIBM Analytics Content Hub information disclosure5.3 Medium
- ibm cloud pak systemIBM Cloud Pak System information disclosure5.3 Medium
- ibm cloud pak systemIBM Cloud Pak System information disclosure5.3 Medium
- ibm cloud pak systemIBM Cloud Pak System information disclosure5.3 Medium
- ibm control centerIBM Control Center cross-site scripting5.4 Medium
- ibm control centerIBM Control Center information disclosure4.3 Medium
- david de boer paytiumWordPress Paytium plugin <= 4.4.11 - Full Path Disclosure (FPD) vulnerability5.3 Medium
- 8blocks 1003 mortgage application1003 Mortgage Application <= 1.87 - Unauthenticated Full Path Disclosure5.3 Medium
- ibm mqIBM MQ information disclosure6.2 Medium
- sap se netweaver application server for abap and abap platform, sap basis +1 moreInformation Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform5.3 Medium
- ibm cognos controller, controller +1 moreIBM Cognos Controller information disclosure4.3 Medium
- ibm cognos controller, controller +1 moreIBM Cognos Controller information disclosure3.7 Low
- ibm cognos controller, controller +1 moreIBM Cognos Controller information disclosure4.3 Medium
- ibm concert, concert software +1 moreIBM Concert Software information disclosure5.3 Medium
- progress sitefinityInformation Exposure Through an Error Message vulnerability in Progress Software Corporation...7.7 High
- ibm jazz foundationIBM Jazz Foundation information disclosure4.3 Medium
- ibm engineering insights, engineering lifecycle optimization - engineering insights +1 moreIBM Engineering Lifecycle Optimization - Engineering Insights information disclosure5.3 Medium
- apache hive, spark +1 moreApache Hive, Apache Spark, Apache Spark: CookieSigner exposes the correct signature when message verification fails5.9 Medium
- ibm mqIBM MQ information disclosure6.2 Medium
- Show moreLoading…