CWE-209: Generation of Error Message Containing Sensitive Information
The product generates an error message that includes sensitive information about its environment, users, or associated data.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- limesurveyMultiple vulnerabilities in Limesurvey6.9 Medium
- times software e-payrollImproper neutralization of input in Times Software E-PAYROLL5.3 Medium
- desktopalert pingalert application serverA vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11...4.3 Medium
- directusDirectus Vulnerable to Information Leakage in Existing Collections4.3 Medium
- siemens altair grid engineA vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected...6.8 Medium
- vertikal systems hospital manager backend servicesVertikal Systems Hospital Manager Backend Services Generation of Error Message Containing Sensitive Information6.9 Medium
- azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 moreError Messages Wrapped In HTTP Header6.9 Medium
- moodleMoodle: router produces json instead of 404 error for invalid course id5.3 Medium
@actual-app/sync-servernpmActual Sync-server Gocardless service is logging sensitive data including bearer tokens and account numbers4.2 Mediumibexa/userPackagistibexa/user login enumerates user accounts6.9 Medium- squid-cache squidSquid vulnerable to information disclosure via authentication credential leakage in error handling10.0 Critical
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows server 2025 +3 more +5 moreWindows USB Video Class System Driver Information Disclosure Vulnerability5.5 Medium
- hcl software unica centralized offer managementHCL Unica Centralized Offer Management is vulnerable to poor unhandled exceptions which exposes sensitive information3.5 Low
- canonical lxdProject existence disclosure in LXD images API6.9 Medium
- dell bsafe crypto-jDell Crypto-J generates an error message that includes sensitive information about its...5.9 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Kernel Memory Information Disclosure Vulnerability5.5 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal and Liferay DXP vulnerable to store Cross-site Scripting4.6 Medium
- typo3, typo3 cms +1 moreInformation Disclosure via File Abstraction Layer5.3 Medium
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal exposes 500 status when attempting login with a deleted client secret5.1 Medium
- google androidIn writeContent of RemotePrintDocument.java, there is a possible information disclosure due to a...5.0 Medium
- ibm security verify governance identity manager, security verify governance +1 moreIBM Security Verify Governance Identity Manager information disclosure7.5 High
- red hat openshift pipelines, advanced cluster management for kubernetes 2, advanced cluster security 4 +12 more +14 moreGithub.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure5.3 Medium
- mobile industrial robots mir fleet, mir robots +1 moreInformation Disclosure in MiR robots and MiR fleet through verbose error pages5.3 Medium
- hcltech bigfix saas, hcl software bigfix saas remediate +1 moreHCL BigFix SaaS Authentication Service is affected by a sensitive information disclosure5.3 Medium
- mtons mblogmtons mblog register information exposure6.3 Medium
- ome omero-webOMERO.web displays unecessary user information when requesting to reset the password5.3 Medium
- siemens smartclient modules opcenter ql home (sc), soa audit, soa cockpit +1 more +3 moreA vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >=...2.1 Low
- siemens smartclient modules opcenter ql home (sc), soa audit, soa cockpit +1 more +3 moreA vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >=...5.1 Medium
- wukongopensource wukongcrm, 5kcrm wukong crm +1 moreWuKongOpenSource WukongCRM API Response upload information exposure5.3 Medium
- nvidia triton inference serverNVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python...7.5 High
- atjiu pybbsatjiu pybbs Registered Email SettingsApiController.java sendEmailCode information exposure6.3 Medium
- 4cstrategies exonautAn issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6. There are verbose error...9.8 Critical
- ibm analytics content hubIBM Analytics Content Hub information disclosure4.3 Medium
- ibm analytics content hubIBM Analytics Content Hub information disclosure5.3 Medium
- wftpserver wing ftp server, wing ftp server ftp server +1 moreloginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the...4.3 Medium
- quiter gateway, gateway (java war on apache tomcat) +1 moreImproper error handling vulnerability in Quiter Gateway6.9 Medium
- infinispan, red hat data grid 8.5.4, jboss enterprise application platform 7 +4 more +6 moreInfinispan: credential leakage in infinispan cli5.5 Medium
- digitaldruid hoteldruidIn HotelDruid 3.0.7, an unauthenticated attacker can exploit verbose SQL error messages on creadb...7.5 High
- fasterxml jackson-coreJackson-core Vulnerable to Memory Disclosure via Source Snippet in JsonLocation4.0 Medium
- ibm verify identity access digital credentialsIBM Verify Identity Access Digital Credentials information disclosure4.3 Medium
- ibm security guardiumIBM Security Guardium information disclosure4.3 Medium
- m3m printer server webUser enumeration in M3M Printer Server Web6.9 Medium
- synck mailform pro cgiMailform Pro CGI prior to 4.3.4 generates error messages containing sensitive information, which...6.3 Medium
- schweitzer engineering laboratories sel blueframe osError Message Contains Sensitive Information5.8 Medium
- hashicorp vault, vault enterprise, openbao +2 moreVault May Include Sensitive Data in Error Logs When Using the KV v2 Plugin4.5 Medium
- fortra goanywhere, goanywhere managed file transfer +1 moreDisclosure of sensitive information in an error message in GoAnywhere prior to version 7.8.03.5 Low
- zte goldendb, zxcloud goldendb +1 moreZTE GoldenDB Database product has an information disclosure vulnerability4.9 Medium
- ibm infosphere information serverIBM InfoSphere Information Server information disclosure4.3 Medium
- cisco nexus dashboardCisco Nexus Dashboard Username Enumeration Vulnerability5.3 Medium
- gitlabGeneration of Error Message Containing Sensitive Information in GitLab6.3 Medium
- Show moreLoading…