CWE-209
High likelihoodGeneration of Error Message Containing Sensitive Information
The product generates an error message that includes sensitive information about its environment, users, or associated data.
561 vulnerabilities with CWE-209
CVE-2022-50686
HIGH
Kentico Xperience - Info Disclosure
CVSS 7.5
CVE-2022-22363
MEDIUM
IBM Cognos Controller <11.0.1 - Info Disclosure
CVSS 4.3
CVE-2022-35640
MEDIUM
IBM Sterling Partner Engagement Manager 6.2.2 - Info Disclosure
CVSS 4.0
CVE-2022-32756
LOW
IBM Security Verify Directory 10.0.0 - Sensitive Information Exposure via Error Message
CVSS 2.7
CVE-2022-43891
LOW
IBM Security Verify Privilege On-Premises 11.5 - Info Disclosure
CVSS 2.7
CVE-2022-4870
MEDIUM
Octopus Server 3.0.0-2023.1.9879 - Information Disclosure via Error Message
CVSS 5.3
CVE-2022-4770
MEDIUM
Hitachi Vantara Pentaho Business Analytics Server < 9.3.0.2 - Sensitive Information Exposure via SQL Error Message
CVSS 4.3
CVE-2022-4769
MEDIUM
Hitachi Vantara Pentaho Business Analytics Server < 9.3.0.2 - Sensitive Information Exposure via Invalid File Upload
CVSS 4.3
CVE-2022-46675
MEDIUM
Wyse Management Suite Repository <3.8 - Info Disclosure
CVSS 5.3
CVE-2022-46371
MEDIUM
Alotcer AR7088H-A <16.10.3 - Info Disclosure
CVSS 5.3
CVE-2022-22449
MEDIUM
IBM Security Verify Governance 10.01 - Sensitive Information Exposure via Error Message
CVSS 5.3
CVE-2022-22760
MEDIUM
Firefox < 97.0 and Firefox ESR < 91.6 - Information Disclosure via Web Worker Resource Import Error Messages
CVSS 6.5
CVE-2022-39304
MEDIUM
ghinstallation < 2.0.0 - Sensitive Information Exposure via Error Message
CVSS 5.0
CVE-2022-20525
LOW
Android 13 - Information Disclosure via Visual Voicemail Package Name Leak
CVSS 3.3
CVE-2022-34881
LOW
Hitachi JP1/Automatic Operation 10-00-10-54-03 11-00-11-51-09 12-00-12-60-01 - Information Disclosure via Error Message
CVSS 3.3
CVE-2022-39307
MEDIUM
Grafana < 8.5.15 and 9.0.0-9.2.4 - Unauthenticated Sensitive Information Disclosure via Password Reset Endpoint
CVSS 6.7
CVE-2022-40292
MEDIUM
php_point_of_sale - Unauthenticated User Enumeration via Unsecured Endpoint
CVSS 5.3
CVE-2022-2508
MEDIUM
Octopus Server < 2022.1.3264 - Information Disclosure via Verbose Error Messages
CVSS 5.3
CVE-2022-39315
MEDIUM
Kirby < 3.5.8.2, 3.6.6.2, 3.7.5.1, 3.8.1 - User Enumeration via Error Message Timing
CVSS 6.5
CVE-2022-38107
MEDIUM
SolarWinds SQL Sentry < 2021.18.10 - Sensitive Information Disclosure via Error Message
CVSS 5.3
CVE-2022-2760
MEDIUM
Octopus Server 2019.5.7-2022.1.3180 - Information Disclosure via Error Message
CVSS 4.3
CVE-2022-34882
CRITICAL
Hitachi RAID Manager Storage Replication Adapter < 02.03.02/02.05.00 - Authenticated Information Exposure
CVSS 9.0
CVE-2022-35715
HIGH
IBM InfoSphere Information Server 11.7 - Info Disclosure
CVSS 7.5
CVE-2022-33930
MEDIUM
Dell Wyse Management Suite <3.6.1 - Info Disclosure
CVSS 4.3
CVE-2022-31189
MEDIUM
DSpace 4.0-6.3 - Information Disclosure via JSPUI Internal Error Stack Trace
CVSS 5.3
Details
Vulnerabilities
561
Exploit Likelihood
High