CWE-359: Privacy violation
The product does not properly prevent a person's private, personal information from being accessed by actors who either (1) are not explicitly authorized to access the information or (2) do not have the implicit consent of the person about whom the information is collected.
Also known as Exposure of Private Personal Information to an Unauthorized Actor, Privacy leak / Privacy leakage, PPI.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- mozilla firefox, thunderbird +1 moreInformation disclosure in the Form Autofill component5.3 Medium
- nodejs node, node.js +1 moreA flaw in Node.js proxy tunnel error handling could expose proxy credentials in `ERR_PROXY_TUNNEL...5.9 Medium
- sparx systems pty ltd. pro cloud serverSparx Pro Cloud Server reveals sensitive information to an unauthenticated user9.3 Critical
- langchain-ai langsmith-sdkLangSmith SDK: Streaming token events bypass output redaction5.3 Medium
- capricorn86 happy dom, happy-dom, red hat ansible automation platform 2 +1 more +3 moreHappy DOM's fetch credentials include uses page-origin cookies instead of target-origin cookies7.5 High
- red hat build of keycloak 26.4, build of keycloak 26.4.11, redhat build of keycloak +2 moreOrg.keycloak.services.resources.admin.userresource: keycloak: information disclosure of disabled user attributes via administrative endpoint2.7 Low
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Defense in Depth Vulnerability3.1 Low
- avideo platform, wwbn avideo +1 moreAVideo Platform 8.1 - Information Disclosure (User Enumeration)8.7 High
- sap commerce cloudInformation Disclosure vulnerability in SAP Commerce Cloud5.3 Medium
- yokogawa electric corporation fast/tools, yokogawa fast\/tools +1 moreA vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. Since...2.1 Low
- apache answerApache Answer: Revision API Improper Access Control leads to Information Disclosure7.5 High
- centralny ośrodek informatyki mobywatelExposure of Confidential Information in mObywatel application1.0 Low
- emaintenance crazy bubble teaUser Enumeration in Crazy Bubble Tea mobile application7.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +29 more +31 moreWindows Spoofing Vulnerability4.6 Medium
- gitlabExposure of Private Personal Information to an Unauthorized Actor in GitLab3.5 Low
- giteaGitea: anonymous user can visit private user's project5.8 Medium
- xiongmaitech xm530v200 x6-weq 8m firmwareAn issue was discovered in Xiongmai XM530 IP cameras on firmware V5.00.R02.000807D8.10010.346624...7.5 High
- m-files corporation serverSession Token Disclosure in M-Files Web8.6 High
- utarit soliclubSensitive Data Exposure in Utarit Informatics' SoliClub7.5 High
- world wide broadcast network avideoAVideo < 20.1 User Information Disclosure via Public API6.9 Medium
- rti connext professionalExposure of Private Personal Information to an Unauthorized Actor vulnerability in RTI Connext Professional (Core Libraries) allows Sniffing Network Traffic.8.3 High
- themefusecom brizy – page builderBrizy – Page Builder <= 2.7.16 - Authenticated (Contributor+) Sensitive Information Exposure via get_users Function6.5 Medium
- nextcloud server, kiteworks security-advisories +1 moreNextcloud Server Contacts Search allowed users to retrieve contact information of other users beyond their contact list4.5 Medium
- lukevella ralllyRallly Information Disclosure Vulnerability in Participant API Leaks Names and Emails Despite Pro Privacy Settings7.1 High
- angular, siemens ruggedcom rst2428p, sidis prime +2 moreAngular HTTP Client Has XSRF Token Leakage via Protocol-Relative URLs7.7 High
- brainstormforce sureforms – contact form, payment form & other custom form builderSureForms <= 1.13.1 - Missing Authorization to Unauthenticated Sensitive Information Exposure5.3 Medium
- premierturk information technologies inc. excavation management information systemImproper Access Control in Premierturk's Excavation Management Information System8.1 High
- ibm db2IBM Db2 information disclosure4.6 Medium
- hcl software bigfix queryHCL BigFix Query is affected by a sensitive information disclosure vulnerability in the WebUI Query application4.2 Medium
- apple ipados, macos, visionos +3 more +5 moreThe issue was addressed by adding additional logic. This issue is fixed in watchOS 26.1, iOS 26.1...7.5 High
- apple macos, ios and ipados +1 moreThis issue was addressed with improved redaction of sensitive information. This issue is fixed in...7.5 High
- apple ipados, visionos, ios and ipados +1 more +3 moreA privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.1 and...5.5 Medium
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...5.5 Medium
- apple ipados, macos, visionos +3 more +5 moreA privacy issue was addressed with improved handling of user preferences. This issue is fixed in...7.5 High
- apple macosA permissions issue was addressed with additional sandbox restrictions. This issue is fixed in...7.5 High
- apple ipados, ios and ipados, iphone os +2 moreThis issue was addressed by restricting options offered on a locked device. This issue is fixed...4.6 Medium
- apple macosA permissions issue was addressed with additional sandbox restrictions. This issue is fixed in...5.5 Medium
- apple ipados, macos, visionos +2 more +4 moreA privacy issue was addressed by removing the vulnerable code. This issue is fixed in iOS 26.1...5.5 Medium
- cbk soft software hardware electronic computer systems industry and trade inc. envisionUser Enumeration in CBK Soft's enVision7.5 High
- gallagher command centre serverExposure of Private Personal Information to an Unauthorized Actor (CWE-359) in the Command Centre...5.5 Medium
- restaurant brands international assistant platform, rbi restaurant brands international assistant +1 moreThe Restaurant Brands International (RBI) assistant platform through 2025-09-06 has a Global...5.0 Medium
- fortinet fortidlp, fortidlp agent +1 moreAn Exposure of Private Personal Information ('Privacy Violation') vulnerability [CWE-359] in...5.1 Medium
- gpp-woo gpp-burgerportaalName and e-mail of employee that has done a publication is discoverable in gpp-burgerportaal6.9 Medium
- google geminiInformation Disclosure in Gemini iOS App1.0 Low
- mozilla firefox, firefox for ios +1 moreData stored in cookies for non-HTML content while browsing Incognito could be viewed after closing private tabs4.0 Medium
- flagforgeFlagForgeCTF Exposes User Emails via Public /api/user/[username] API6.9 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreThis issue was addressed with improved redaction of sensitive information. This issue is fixed in...3.3 Low
- apple macosA privacy issue was addressed with improved private data redaction for log entries. This issue is...3.3 Low
- apple macosA configuration issue was addressed with additional restrictions. This issue is fixed in macOS...4.4 Medium
- apple macosA privacy issue was addressed with improved private data redaction for log entries. This issue is...6.2 Medium
- Show moreLoading…