CWE-209

High likelihood

Generation of Error Message Containing Sensitive Information

Parent: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

The product generates an error message that includes sensitive information about its environment, users, or associated data.

582 vulnerabilities with CWE-209

CVE-2023-40725 MEDIUM

QMS Automotive <V12.39 - Info Disclosure

CVSS 4.0

CVE-2023-37489 MEDIUM

SAP BusinessObjects BI Platform 403 - Unauthenticated Info Disclosure via VMS

CVSS 5.3

CVE-2023-39264 MEDIUM

Apache Superset <= 2.1.0 - Sensitive Information Exposure via REST API Error Stack Traces

CVSS 4.3

CVE-2023-35124 LOW

OAS Platform 18.00.0072 - Information Disclosure via Configuration Management Requests

CVSS 3.1

CVE-2023-33835 MEDIUM

IBM Security Verify Information Queue <10.0.4,10.0.5 - Info Disclosure

CVSS 4.3

CVE-2023-33834 MEDIUM

IBM Security Verify Information Queue <10.0.5 - Info Disclosure

CVSS 4.3

CVE-2023-40767 CRITICAL

PHPJabbers Make an Offer Widget v1.0 - Info Disclosure

CVSS 9.8

CVE-2023-40766 CRITICAL

PHPJabbers Ticket Support Script <3.2 - Info Disclosure

CVSS 9.8

CVE-2023-40765 CRITICAL

PHPJabbers Event Booking Calendar <4.0 - Info Disclosure

CVSS 9.8

CVE-2023-40764 CRITICAL

PHP Jabbers Car Rental Script 3.0 - Info Disclosure

CVSS 9.8

CVE-2023-40763 CRITICAL

PHPJabbers Taxi Booking Script <v2.0 - Info Disclosure

CVSS 9.8

CVE-2023-40762 CRITICAL

PHPJabbers Fundraising Script v1.0 - Info Disclosure

CVSS 9.8

CVE-2023-40761 CRITICAL

PHPJabbers Yacht Listing Script <2.0 - Info Disclosure

CVSS 9.8

CVE-2023-40760 CRITICAL

PHP Jabbers Hotel Booking System <4.0 - Info Disclosure

CVSS 9.8

CVE-2023-40759 CRITICAL

PHP Jabbers Restaurant Booking Script <3.0 - Info Disclosure

CVSS 9.8

CVE-2023-40758 CRITICAL

PHPJabbers Document Creator 1.0 - Info Disclosure

CVSS 9.8

CVE-2023-40757 CRITICAL

PHPJabbers Food Delivery Script <3.1 - Info Disclosure

CVSS 9.8

CVE-2023-26272 MEDIUM

IBM Guardium Cloud Key Manager <1.10.3 - Info Disclosure

CVSS 5.3

CVE-2023-32755 MEDIUM

e-Excellence U-Office Force - Unauthenticated Sensitive Information Exposure via Error Message

CVSS 5.3

CVE-2023-40171 CRITICAL

Netflix Dispatch < 20230817 - JWT Secret Key Exposure in Basic Authentication Provider Error Message

CVSS 9.1

CVE-2023-35009 MEDIUM

IBM Cognos Analytics 11.1.7, 11.2.0, 11.2.1 - Unauthenticated Sensitive Information Exposure

CVSS 5.3

CVE-2023-1210 LOW

GitLab 12.9-16.0.8 16.1-16.1.3 16.2-16.2.2 - Email Leak via Error Message

CVSS 3.1

CVE-2023-31429 MEDIUM

Brocade Fabric OS <9.1.1c-9.2.0 - Info Disclosure

CVSS 5.5

CVE-2023-20593 MEDIUM

Xen - Information Disclosure via Zen 2 CPU Microarchitectural Side Channel

CVSS 5.5

CVE-2023-25948 HIGH

Honeywell Experion Server 501.1-501.6hf8 - Information Disclosure via Error Message

CVSS 7.5

Details

Vulnerabilities 582

Exploit Likelihood High

Links