CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere
The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.
A kind of CWE-200 Information Disclosure.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Information Disclosure Vulnerability5.5 Medium
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +16 more +18 moreWindows License Manager Information Disclosure Vulnerability5.5 Medium
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +3 more +5 moreWindows MIDI Service Module Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWin32k Information Disclosure Vulnerability5.6 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Kernel Information Disclosure Vulnerability5.7 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Kernel Information Disclosure Vulnerability5.5 Medium
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +3 more +5 moreWindows MIDI Service Module Information Disclosure Vulnerability5.5 Medium
- asus armoury crateExposure of Sensitive System Information to an Unauthorized Control Sphere in Armoury Crate...5.7 Medium
- sap se web dispatcher, internet communication manager and sap content serverInformation Disclosure vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content Server6.5 Medium
- passmark software burnintest, osforensics, performancetest +2 morePassMark PerformanceTest, BurnInTest, and OSForensics Physical Memory Disclosure via DirectIo64.sys IOCTL8.5 High
- passmark software burnintest, osforensics, performancetest +2 morePassMark PerformanceTest, BurnInTest, and OSForensics Kernel Null Pointer Dereference via DirectIo64.sys IOCTL8.4 High
- xing inc. cptrans-me-xXING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized Control...8.7 High
- dotstore woocommerce product attachmentWordPress WooCommerce Product Attachment plugin <= 2.3.4 - Sensitive Data Exposure vulnerability7.5 High
- red hat certificate system 9, enterprise linux 10, enterprise linux 6 +3 more +5 morePki-core: dogtag-pki: unauthenticated dogtag ca rest api exposes security domain hosts5.3 Medium
- extend themes lead generation contact widget & ai chatbot: chat button, phone call, telegram, email – siteleadsWordPress Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads plugin <= 1.2.0 - Sensitive Data Exposure vulnerability7.5 High
- brushfire online experienceBrushfire unauthenticated information disclosure6.9 Medium
- dell command update, command update (dcu) +1 moreDell Command Update (DCU), versions prior to 5.7.1, contain an Exposure of Sensitive System...5.5 Medium
- iberezansky 3d flipbook – pdf flipbook viewer, flipbook image galleryWordPress 3D FlipBook – PDF Flipbook Viewer, Flipbook Image Gallery plugin <= 1.16.20 - Sensitive Data Exposure vulnerability5.3 Medium
- rayhanduitku duitku payment gatewayWordPress Duitku Payment Gateway plugin <= 2.11.14 - Sensitive Data Exposure vulnerability7.5 High
- bookingwp woocommerce appointmentsWordPress WooCommerce Appointments plugin <= 5.3.8 - Sensitive Data Exposure vulnerability7.5 High
- kendysond payment forms for paystackWordPress Payment Forms for Paystack plugin <= 4.0.5 - Sensitive Data Exposure vulnerability6.5 Medium
- tbea tlogger (tbea communication box 3rd generation)Information Disclosure via UART2.4 Low
- zyxel networks wah7601Sensitive Data Exposure in Zyxel WAH7601 Router6.5 Medium
- getkirby kirbyKirby: System path exposure from error messages in the REST API6.9 Medium
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - JEXL Content Selector Sandbox Property-Read Bypass5.3 Medium
- yithemes yith woocommerce zoom magnifierWordPress YITH WooCommerce Zoom Magnifier plugin <= 2.52.0 - Sensitive Data Exposure vulnerability5.3 Medium
- suse rancherCross-Cluster Impersonation Confused-Deputy Privilege Escalation9.1 Critical
- hcl software icontrolHCL iControl is affected by multiple security vulnerabilities.4.0 Medium
- sap se netweaver application server for abapInformation Disclosure vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform4.3 Medium
- ericsson packet core controller (pcc)Exposure of Sensitive System Information to an Unauthorized Control Sphere Vulnerability4.8 Medium
- tim strifler exclusive addons elementorWordPress Exclusive Addons Elementor plugin <= 2.8.0 - Sensitive Data Exposure vulnerability5.3 Medium
- chrisvrichardson mappress maps for wordpressWordPress MapPress Maps for WordPress plugin <= 2.97.6 - Sensitive Data Exposure vulnerability5.3 Medium
- byteflows travel & hotel bookingWordPress Byteflows Travel & Hotel Booking plugin <= 1.0.0 - Sensitive Data Exposure vulnerability7.5 High
- shiptime shiptime: discounted shipping ratesWordPress ShipTime: Discounted Shipping Rates plugin <= 1.1.1 - Sensitive Data Exposure vulnerability7.5 High
- pronetiqs panduit intravueExposure of Sensitive System Information to an Unauthorized Control Sphere in Panduit IntraVUE by Pronetiqs9.2 Critical
- pronetiqs panduit intravueExposure of Sensitive System Information to an Unauthorized Control Sphere in Panduit IntraVUE by Pronetiqs6.9 Medium
- multivendorx woocommerce product stock alertWordPress WooCommerce Product Stock Alert plugin <= 3.0.6 - Sensitive Data Exposure vulnerability6.5 Medium
- takayuki miyauchi tinymce templatesWordPress TinyMCE Templates plugin <= 4.8.1 - Sensitive Data Exposure vulnerability4.3 Medium
- mahmudul hasan arif wp social ninjaWordPress WP Social Ninja plugin <= 4.3.0 - Sensitive Data Exposure vulnerability5.3 Medium
- bdthemes ultimate store kit elementor addonsWordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Sensitive Data Exposure vulnerability5.3 Medium
- complianzWordPress Complianz plugin <= 7.5.0 - Sensitive Data Exposure vulnerability5.3 Medium
- catch themes createWordPress Create by Mediavine plugin <= 2.6.0 - Sensitive Data Exposure vulnerability5.3 Medium
- shahjahan jewel ninja tablesWordPress Ninja Tables plugin <= 5.2.10 - Sensitive Data Exposure vulnerability5.3 Medium
- chouby polylang, polylang pro +1 moreWordPress Polylang and Polylang Pro plugins <= 3.8.5 - Sensitive Data Exposure vulnerability4.3 Medium
- hclsoftware devops planAn information disclosure vulnerability affects HCL DevOps Plan6.9 Medium
- red hat build of keycloak 26.6, build of keycloak 26.6.7, data grid 8 +3 more +5 moreKeycloak-services: keycloak-services: organization invitation link exposure allows unauthorized member creation4.9 Medium
- lenovo ideapad 5 15aba7 bios, ideapad pro 5 16agp11 bios, ideapad pro 5 16asp10 bios +54 more +56 moreA potential vulnerability could allow a local privileged attacker to disclose the address of...6.7 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Kernel Information Disclosure Vulnerability6.2 Medium
- Show moreLoading…