CWE-200
High likelihoodExposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
10,108 vulnerabilities with CWE-200
CVE-2025-61764
MEDIUM
Oracle WebLogic Server 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 - Unauthenticated Exposure of Sensitive Information via HTTP
CVSS 5.3
CVE-2025-61750
MEDIUM
Oracle PeopleSoft Enterprise PeopleTools 8.61 and 8.62 - Unauthorized Data Access via Query Component
CVSS 4.3
CVE-2025-53066
HIGH
Oracle GraalVM and Java SE - Unauthenticated Exposure of Sensitive Information via JAXP
CVSS 7.5
CVE-2025-53047
MEDIUM
Oracle Database Server 19.3-19.28, 21.3-21.19, 23.4-23.9 - Unauthenticated Exposure of Sensitive Information via Bonjour
CVSS 5.8
CVE-2025-53043
HIGH
Oracle Product Hub 12.2.3-12.2.14 - Unauthorized Data Access and Modification via Item Catalog
CVSS 8.1
CVE-2025-53036
HIGH
Oracle Financial Services Analytical ... - Information Disclosure
CVSS 8.6
CVE-2025-50074
MEDIUM
Oracle Financial Services Revenue Management - Unauthorized Access
CVSS 4.9
CVE-2025-61220
HIGH
AutoBizLine com.mysecondline.app <1.2.91 - Privilege Escalation
CVSS 7.5
CVE-2025-60344
HIGH
D-Link DSR-150, DSR-150N, and DSR-250N v1.09B32_WW - Unauthenticated Path Traversal
CVSS 8.6
CVE-2025-11151
HIGH
CityPLus <V24.29500.1.0 - Info Disclosure
CVSS 8.2
CVE-2025-6239
MEDIUM
Zohocorp ManageEngine Applications Manager <176800 - Info Disclosure
CVSS 6.5
CVE-2025-62699
MEDIUM
The Wikimedia Foundation Mediawiki - Translate Extension <1.39 - In...
CVE-2025-57837
LOW
Tileservice module - Info Disclosure
CVSS 2.9
CVE-2025-57839
MEDIUM
Honor MagicOS < 9.0.0.100 - Information Disclosure in Photo Module
CVSS 4.0
CVE-2025-57838
MEDIUM
Honor MagicOS < 9.0.0.100 - Exposure of Sensitive Information
CVSS 4.0
CVE-2025-10750
MEDIUM
PowerBI Embed Reports <1.2.0 - Info Disclosure
CVSS 5.3
CVE-2025-62669
MEDIUM
The Wikimedia Foundation Mediawiki - CentralAuth Extension <1.39 - ...
CVE-2025-61907
MEDIUM
Icinga 2.4-2.15.0 - Authenticated Information Disclosure via Filter Expression
CVSS 6.5
CVE-2025-53092
MEDIUM
Strapi < 5.20.0 - CORS Misconfiguration via Origin Header Reflection
CVSS 6.5
CVE-2025-11196
MEDIUM
WordPress External Login <1.11.2 - Info Disclosure
CVSS 4.3
CVE-2025-59294
LOW
Windows Taskbar Live - Unauthenticated Exposure of Sensitive Information via Physical Attack
CVSS 2.1
CVE-2025-59284
LOW
Windows 11 22H2-25H2 and Windows Server 2025 - Unauthorized Sensitive Information Exposure via NTLM Spoofing
CVSS 3.3
CVE-2025-59260
MEDIUM
Windows Server 2016/2019/2022/2025 Authenticated Information Disclosure in Failover Cluster Virtual Driver
CVSS 5.5
CVE-2025-59214
MEDIUM
Windows File Explorer - Unauthorized Sensitive Information Exposure via Spoofing
CVSS 6.5
CVE-2025-59211
MEDIUM
Windows 10 1507-22H2, Windows 11 22H2-25H2, Windows Server 2012 - Information Disclosure in Push Notification Core
CVSS 5.5
Details
Vulnerabilities
10,108
Exploit Likelihood
High