CWE-209: Generation of Error Message Containing Sensitive Information
The product generates an error message that includes sensitive information about its environment, users, or associated data.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- linuxfoundation podman desktop, podman-desktop, red hat build of podman desktop +2 more +4 morePodman Desktop WebView Server Exposed8.2 High
github.com/authorizerdev/authorizerGoAuthorizer: CQL/N1QL Injection in Cassandra and Couchbase Backends via fmt.Sprintf String Interpolation7.3 High- jahlives openssl encryptopenssl_encrypt before 1.4.0 Information Disclosure via /ready endpoint8.7 High
- xenforoXenForo Path Disclosure via open_basedir Exceptions8.7 High
- wandb openuiwandb OpenUI APIStatusError server.py generic_exception_handler information exposure5.1 Medium
- openwebui open webui, open-webui +1 moreOpen WebUI vulnerable to Path Traversal in `POST /api/v1/audio/transcriptions`4.3 Medium
- ibm infosphere information serverIBM InfoSphere Information Server Information Disclosure4.3 Medium
- ibm infosphere information serverIBM InfoSphere Information Server Information Disclosure4.3 Medium
- hclsoftware travelerHCL Traveler is affected by sensitive information disclosure4.3 Medium
- red hat build of keycloak, build of keycloak 26.4.12 +1 moreKeycloak: keycloak: user enumeration via differential error messages3.7 Low
- free5gc, free5gc udm +1 morefree5GC UDM incorrectly returns 500 for empty supi path parameter in PATCH sdm-subscriptions reques8.7 High
- free5gc, free5gc udm +1 morefree5GC UDM incorrectly returns 500 for empty supi path parameter in DELETE sdm-subscriptions request6.9 Medium
- ibm sterling partner engagement managerIBM Sterling Partner Engagement Manager Information Disclosure5.3 Medium
- parse-community parse-serverParse Server: Malformed `$regex` query leaks database error details in API response6.9 Medium
- cryptomatorCryptomator: Leaking of cleartext paths into log file in non-debug mode2.2 Low
- navtor navbox, navbox firmware +1 moreNavtor NavBox allows information disclosure via the /api/ais-data endpoint. A remote,...5.3 Medium
- opensiftOpenSift: Sensitive implementation details exposed via raw exception messages and token-returning endpoints5.3 Medium
- netapp ontap, ontap 9 +1 moreONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure...5.3 Medium
github.com/filecoin-project/curioGoCurio exposes database credentials to users with network access through verbose HTTP error responses7.1 High- free5gc udrfree5GC has improper error handling in NEF with information exposure6.6 Medium
- free5gc udrfree5GC vulnerable to improper error handling in NEF with information exposure6.6 Medium
- free5gc udrfree5GC UDR's NEF incorrectly returns 500 for missing PFD data (UDR 404) in Nnef_PfdManagement GET request2.7 Low
- apache airflowApache Airflow: Disclosure of secrets to UI via kwargs6.5 Medium
- openclawOpenClaw session tool visibility hardening and Telegram webhook secret fallback6.9 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreThe Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway is Vulnerable to Information Disclosure4.9 Medium
- hewlett packard enterprise (hpe) hpe aruba networking private 5g core, hpe aruba networking private 5g core +1 moreUnauthenticated Information Disclosure in application API allows sensitive system information exposure6.5 Medium
- yokogawa electric corporation fast/tools, yokogawa fast\/tools +1 moreA vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. Detailed...6.9 Medium
- ibm cloud pak system, os image for red hat linux systems +1 moreMultiple Vulnerabilities in IBM Cloud Pak System5.3 Medium
- ibm cloud pak system, os image for red hat linux systems +1 moreMultiple Vulnerabilities in IBM Cloud Pak System5.3 Medium
- ibm cloud pak system, os image for red hat linux systems +1 moreMultiple Vulnerabilities in IBM Cloud Pak System5.3 Medium
- broadcom sannavPlain password is generated in the audit logs while executing update-reports-purge-settings.sh script with Brocade SANnav before 2.4.0a7.1 High
- vllm, red hat ai inference server, ai inference server 3.2 +5 more +7 morevLLM leaks a heap address when PIL throws an error9.8 Critical
- codriapp innovation and software technologies inc. heygarsonSensitive Data Exposure in CoDeriApp's HeyGarson8.2 High
- aptsys gemscms backendA vulnerability in the PHP backend of gemscms.aptsys.com.sg thru 2025-05-28 allows...5.3 Medium
- aptsys gemscms backendA vulnerability in the PHP backend of gemsloyalty.aptsys.com.sg thru 2025-05-28 allows...5.3 Medium
- arksine moonrakerMoonraker with LDAP Enabled Allows Malicious Search Filter Injection2.7 Low
- birkir primebirkir prime GraphQL Directive graphql information exposure6.9 Medium
- hcl aionHCL AION is affected by a Technical Error Disclosure vulnerability1.8 Low
- radykal fancy product designerFancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Full Path Disclosure via 'pdf' Parameter5.3 Medium
- sick incoming goods suiteCertain error messages returned by the application expose internal system details that should not...4.3 Medium
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +8 more +10 moreWindows Kernel Information Disclosure Vulnerability5.5 Medium
- qnap hybrid backup sync, qnap systems inc. hbs 3 hybrid backup sync +1 moreHBS 3 Hybrid Backup Sync7.0 High
- kentico xperienceKentico Xperience <= 12.0 Portal Engine Form Control Information Disclosure6.9 Medium
- churchcrm, churchcrm crm +1 moreChurchCRM discloses database information on error message10.0 Critical
- hitachi vantara pentaho data integration and analyticsHitachi Vantara Pentaho Business Analytics Server - Generation of Error Message Containing Sensitive Information5.3 Medium
- gitlabGeneration of Error Message Containing Sensitive Information in GitLab4.3 Medium
- ibm planning analytics localIBM Planning Analytics Local is vulnerable to disclosing sensitive information4.3 Medium
- nextcloud desktop, kiteworks security-advisories +1 moreNextcloud Desktop discloses information when attempting to lock a file inside a end-to-end encrypted directory2.4 Low
- atisoluciones cigesImproper Error Handling Leading to Sensitive Information Disclosure in CIGES ≤ 2.15.62.7 Low
- revive adserver, revive-adserver revive adserver +1 moreDebug information disclosure in the SQL error message to in Revive Adserver 5.5.2 and 6.0.1 and...4.3 Medium
- Show moreLoading…