CWE-200
High likelihoodExposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
10,152 vulnerabilities with CWE-200
CVE-2020-6190
MEDIUM
SAP NetWeaver AS Java - Info Disclosure
CVSS 5.8
CVE-2020-2103
MEDIUM
Jenkins < 2.204.1, 2.205-2.218 - Exposure of Sensitive Information via whoAmI Diagnostic Page
CVSS 5.4
CVE-2020-5220
MEDIUM
Sylius ResourceBundle 1.3.0-1.3.12, 1.4.0-1.4.5, 1.5.0, 1.6.0-1.6.2 - Data Exposure via Serialization Group HTTP Header
CVSS 4.4
CVE-2020-6954
MEDIUM
Cayin SMP-PRO4 Firmware - Unauthenticated Password Exposure via media_folder.cgi webpass Parameter
CVSS 6.5
CVE-2020-5197
MEDIUM
GitLab 5.1.0-12.6.1 - Exposure of Sensitive Information via Incorrect Access Control
CVSS 4.3
CVE-2020-6170
CRITICAL
Genexis Platinum-4410 <2.1 - Auth Bypass
CVSS 9.8
CVE-2019-1815
MEDIUM
Cisco Meraki MX67-MX68 - Info Disclosure
CVSS 5.3
CVE-2019-25210
MEDIUM
CNCF Helm <3.13.3 - Info Disclosure
CVSS 6.5
CVE-2019-18177
MEDIUM
Citrix ADC and Gateway < 13.0-58.30 - Authenticated Information Disclosure via SSL VPN Endpoint
CVSS 6.5
CVE-2019-14802
MEDIUM
HashiCorp Nomad 0.5.0-0.9.4 - Exposure of Sensitive Information via Template Rendering
CVSS 5.3
CVE-2019-5641
LOW
Rapid7 InsightVM < 6.6.160 - Information Exposure via Insufficient Session Expiration
CVSS 3.3
CVE-2019-25069
MEDIUM
Axios Italia Axios RE <1.7.0-7.0.0 - Info Disclosure
CVSS 5.3
CVE-2019-14839
HIGH
Red Hat Business Central - Exposure of Sensitive Information via HTTP Request Interception
CVSS 7.5
CVE-2019-5640
LOW
Rapid7 Nexpose < 6.6.114 - Unauthenticated Exposure of Sensitive Information via Browser Inspect Element
CVSS 3.3
CVE-2019-18947
LOW
Micro Focus Solutions Business Manager Application Repository <11.7...
CVSS 3.5
CVE-2019-14480
CRITICAL
AdRem NetCrunch 10.6.0.4587 - Auth Bypass
CVSS 9.8
CVE-2019-19283
MEDIUM
Siemens XHQ < 6.1.0.0 - Information Exposure via Web Server
CVSS 5.3
CVE-2019-4349
LOW
IBM Maximo Anywhere <7.6.3.1 - Info Disclosure
CVSS 3.5
CVE-2019-15963
MEDIUM
Cisco Unified Communications Manager - Info Disclosure
CVSS 6.5
CVE-2019-7005
HIGH
IP Office <11.0.4.2 - Info Disclosure
CVSS 7.5
CVE-2019-4731
MEDIUM
IBM MQ Appliance 9.1.4.CD - Info Disclosure
CVSS 5.5
CVE-2019-13033
LOW
CISOfy Lynis 2.0.0-2.7.5 - Exposure of Sensitive Information via Process List
CVSS 3.3
CVE-2019-20836
HIGH
Foxit Reader and PhantomPDF < 9.5 - Exposure of Sensitive Cloud Credentials
CVSS 7.5
CVE-2019-13023
MEDIUM
JetSelect - Insufficiently Protected Credentials via HTML Password Field Obfuscation
CVSS 6.5
CVE-2019-18867
HIGH
Blaauw Remote Kiln Control <3.00r4 - Info Disclosure
CVSS 7.5
Details
Vulnerabilities
10,152
Exploit Likelihood
High