CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere
The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- wpdeveloper essential addons for elementorWordPress Essential Addons for Elementor plugin <= 6.1.9 - Sensitive Data Exposure Vulnerability4.3 Medium
- mattermost, mattermost server +1 moreData exfiltration via AI plugin Jira tool3.0 Low
- notfound macro calculator with admin email optin & dataWordPress Macro Calculator with Admin Email Optin & Data plugin <= 1.0 - Multiple Vulnerabilities vulnerability7.5 High
- oracle hospitality simphonyVulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications...7.6 High
- ibm aspera consoleIBM Aspera Console information disclosure5.3 Medium
- wp messiah ai image alt text generator for wpWordPress Ai Image Alt Text Generator for WP plugin <= 1.1.9 - Sensitive Data Exposure vulnerability4.3 Medium
- bogdan bendziukov squeezeWordPress Squeeze plugin <= 1.6 - Full Path Disclosure (FPD) vulnerability2.7 Low
- inaba denki sangyo co., ltd. ac-wps-11ac, ac-pd-wps-11ac, ac-pd-wps-11ac-p +3 more +5 moreInformation disclosure of authentication information in the specific service vulnerability exists...7.5 High
- maennchen1.de m1.downloadlistWordPress m1.DownloadList plugin <= 0.24 - Sensitive Data Exposure vulnerability6.5 Medium
- element-hq element-webElement Web could load a malicious instance of Element Call leaking media encryption keys3.8 Low
- qualcomm ar8035 firmware, fastconnect 6700 firmware, fastconnect 6800 firmware +158 more +160 moreExposure of Sensitive System Information to an Unauthorized Control Sphere in KERNEL7.7 High
- era404 stafflistWordPress StaffList plugin <= 3.2.7 - Sensitive Data Exposure vulnerability5.3 Medium
- j. tyler wiest jetpack feedback exporterWordPress Jetpack Feedback Exporter plugin <= 1.23 - Sensitive Data Exposure Vulnerability5.3 Medium
- hcl software travelerAn internal path disclosure vulnerability affects HCL Traveler4.3 Medium
- beee acf city selectorWordPress ACF City Selector plugin <= 1.17.0 - Sensitive Data Exposure vulnerability5.3 Medium
- wpbean our team membersWordPress Our Team Members plugin <= 2.2 - Sensitive Data Exposure vulnerability4.3 Medium
- zulip, zulip server +1 moreZulip exports can leak private data4.6 Medium
- b&r industrial automation gmbh aprolDefault or Guessable SNMP community names in B&R APROL8.7 High
- amazon aws cloud development kit, aws cloud development kit command line interface +1 moreAWS CDK CLI prints AWS credentials retrieved by custom credential plugins5.7 Medium
- langchain-ai langchain-ai/langchainExposure of Sensitive System Information via ImagePromptTemplate in langchain-ai/langchain5.3 Medium
- dell secure connect gateway (scg) 5.0 appliance - srs, secure connect gateway +1 moreDell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.26, contain(s) an Exposure of...5.5 Medium
- ratify-project ratifyRatify Azure authentication providers can leak authentication tokens to non-Azure container registries7.2 High
- ibm sterling b2b integrator standard edition, sterling b2b integrator +1 moreIBM Sterling B2B Integrator information disclosure2.7 Low
- symantec carbon black cloud windows sensorCarbon Black Cloud Windows Sensor Information Leak2.5 Low
- bowo system dashboardWordPress System Dashboard plugin <= 2.8.18 - Sensitive Data Exposure vulnerability4.3 Medium
- rebelcode spotlight social media feedsWordPress Spotlight Social Feeds plugin <= 1.7.1 - Sensitive Data Exposure vulnerability5.3 Medium
- gitlabExposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab4.3 Medium
- quanxun school affairs systemQuanxun School Affairs System - Exposure of Sensitive Information9.8 Critical
- modelscope agentscope, modelscope/agentscope +1 moreLocal File Inclusion (LFI) in modelscope/agentscope7.5 High
- No product listedForever KidsWatch Call Me KW-50 R36_YDR_A3PW_GM7S_V1.0_2019_07_15_16.19.24_cob_h and Forever...9.8 Critical
- vmware aria operations, cloud foundation +1 moreVMware Aria Operations information disclosure vulnerability (CVE-2025-22222)7.7 High
- ibm data virtualization, data virtualization on cloud pak for data, watson query with cloud pak for data +2 moreIBM Watson Query on Cloud Pak for Data information disclosure6.5 Medium
- ibm infosphere information serverIBM InfoSphere Information Server information disclosure5.3 Medium
- ossur mobile logic applicationOssur Mobile Logic Application Exposure of Sensitive System Information to an Unauthorized Control Sphere5.6 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreFreeipa: administrative user data leaked through systemd journal5.5 Medium
- sap businessobjects business intelligence platformMultiple vulnerabilities in SAP BusinessObjects Business Intelligence Platform8.7 High
- sap se netweaver application server abap (applications based on sap gui for html)Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML)6.0 Medium
- sap se gui for javaInformation Disclosure vulnerability in SAP GUI for Java6.0 Medium
- sap se gui for windowsInformation Disclosure vulnerability in SAP GUI for Windows6.0 Medium
- ibm security qradar edrIBM Security QRadar EDR information disclosure5.3 Medium
- ibm concert, concert software +1 moreIBM Concert Software information disclosure5.3 Medium
- infinix mobile com.rlk.weathersLocation information exposure in Infinix Weather app4.8 Medium
- sharp corporation home 5g hr02, pocketwifi 809sh, speed wi-fi next w07 +3 more +5 moreMultiple SHARP routers contain an improper authentication vulnerability in the configuration...5.9 Medium
- tobias keller wp-nerd toolkitWordPress WP-NERD Toolkit plugin <= 1.1 - Sensitive Data Exposure vulnerability7.5 High
- ibm infosphere information serverIBM InfoSphere Information Server information disclosure3.1 Low
- sap businessobjects business intelligence platformInformation Disclosure vulnerability in SAP BusinessObjects Business Intelligence platform5.3 Medium
- adnan analytify, analytify - google analytics dashboard +1 moreWordPress Analytify plugin <= 5.4.3 - Broken Access Control vulnerability6.5 Medium
- element-hq synapseSynapse Matrix has a partial room state leak via Sliding Sync4.3 Medium
- ibm cognos controllerIBM Cognos Controller information disclosure5.3 Medium
- ide interactive content audit exporterWordPress Content Audit Exporter plugin <= 1.1 - Sensitive Data Exposure vulnerability5.3 Medium
- Show moreLoading…