The product provides different responses to incoming requests in a way that reveals internal state information to an unauthorized actor outside of the intended control sphere.
157 vulnerabilities with CWE-204
CVE-2025-31124
MEDIUM
zitadel < 2.63.9 - Username Enumeration via Normalization Bypass
CVSS 5.3
CVE-2025-2910
MEDIUM
Fermax MeetMe < 2024-09 - User Enumeration via Password Reset Error Messages
CVE-2025-24023
LOW
Flask-AppBuilder < 4.5.3 - Unauthenticated Username Enumeration via Timing Attack
CVSS 3.7
CVE-2025-1101
MEDIUM
Q-Free MaxTime <= 2.11.0 - Info Disclosure
CVSS 5.3
CVE-2025-23193
MEDIUM
SAP NetWeaver Server ABAP - Info Disclosure
CVSS 5.3
CVE-2025-24980
MEDIUM
pimcore/admin-ui-classic-bundle < 1.7.4 - User Enumeration via Forgot Password Error Message
CVSS 5.3
CVE-2025-0693
MEDIUM
AWS Sign-in < unknown - Info Disclosure
CVSS 5.3
CVE-2025-23214
MEDIUM
Cosmos-Server < 0.17.7 - User Enumeration via Login Error Code
CVE-2024-0391
MEDIUM
Username Enumeration via Email OTP Flow in Multiple WSO2 Products Allows User Account Discovery
CVSS 5.3
CVE-2024-51447
MEDIUM
Polarion ALM V2310 and V2404 < V2404.2 - Unauthenticated Observable Response Discrepancy in Username Validation
CVSS 5.3
CVE-2024-56476
MEDIUM
IBM TXSeries for Multiplatforms <9.1, 11.1 - Info Disclosure
CVSS 5.3
CVE-2024-55198
MEDIUM
Celk Sistemas Celk Saude <3.1.252.1 - Info Disclosure
CVSS 5.3
CVE-2024-35114
MEDIUM
IBM Control Center 6.2.1 and 6.3.1 - Username Enumeration via Observable Login Discrepancy
CVSS 5.3
CVE-2024-36510
MEDIUM
FortiClientEMS/FortiSOAR <7.5.0 - Info Disclosure
CVSS 5.3
CVE-2024-42174
LOW
HCL MyXalytics - Username Enumeration via Observable Response Discrepancy
CVSS 3.7
CVE-2024-13198
LOW
Langhsu Mblog Blog System 3.5.0 - Info Disclosure
CVSS 3.7
CVE-2024-13028
LOW
Antabot White-Jotter <0.2.2 - Info Disclosure
CVSS 3.7
CVE-2024-12663
LOW
Mee-Admin <= 1.6 - Observable Response Discrepancy via Login Username Parameter
CVSS 3.7
CVE-2024-47129
MEDIUM
goTenna Pro App < 1.6.1 and < 2.0.3 - Observable Response Discrepancy via Broadcast Frame Length
CVSS 4.3
CVE-2024-41715
MEDIUM
goTenna Pro ATAK Plugin < 2.0.7 - Observable Response Discrepancy via Broadcast Frame Length
CVSS 4.3
CVE-2024-8651
MEDIUM
NetCat CMS <6.4.0.24248 - Info Disclosure
CVSS 5.3
CVE-2024-34336
MEDIUM
ORDAT FOSS-Online <2.24.01 - Info Disclosure
CVSS 5.3
CVE-2024-42343
MEDIUM
Loway QueueMetrics 17.06.1-24.05.5 - Observable Response Discrepancy
CVSS 5.3
CVE-2024-38431
MEDIUM
Matrix Tafnit < 8.4.202 - Observable Response Discrepancy
CVSS 5.3
CVE-2024-40627
MEDIUM
fastapi-opa < 2.0.1 - Unauthenticated Information Disclosure via OPTIONS Request Bypass
CVSS 5.8
Details
Vulnerabilities
157