CWE-209
High likelihoodGeneration of Error Message Containing Sensitive Information
The product generates an error message that includes sensitive information about its environment, users, or associated data.
561 vulnerabilities with CWE-209
CVE-2026-2484
MEDIUM
IBM InfoSphere Information Server Information Disclosure
CVSS 4.3
CVE-2026-1262
MEDIUM
IBM InfoSphere Information Server Information Disclosure
CVSS 4.3
CVE-2026-21783
MEDIUM
HCL Traveler is affected by sensitive information disclosure
CVSS 4.3
CVE-2026-4633
LOW
Keycloak: keycloak: user enumeration via differential error messages
CVSS 3.7
CVE-2026-33192
HIGH
free5GC UDM incorrectly returns 500 for empty supi path parameter in PATCH sdm-subscriptions reques
CVE-2026-33065
MEDIUM
free5GC UDM incorrectly returns 500 for empty supi path parameter in DELETE sdm-subscriptions request
CVE-2026-30835
MEDIUM
Parse Server <8.6.7/9.5.0-alpha.6 - Info Disclosure
CVSS 5.3
CVE-2026-29110
LOW
Cryptomator <1.19.0 - Info Disclosure
CVSS 2.2
CVE-2026-2752
MEDIUM
Navtor NavBox 4.12.0.3 and 4.16.2.4 - Unauthenticated Sensitive Information Disclosure via AIS-Data Endpoint
CVSS 5.3
CVE-2026-28675
MEDIUM
OpenSift <1.6.3-alpha - Info Disclosure
CVSS 5.3
CVE-2026-22052
MEDIUM
NetApp ONTAP >= 9.12.1 - Authenticated Information Disclosure via S3 NAS Bucket Directory Listing
CVSS 4.3
CVE-2026-27643
MEDIUM
free5GC UDR <=1.4.1 - Info Disclosure
CVSS 5.3
CVE-2026-27004
MEDIUM
OpenClaw <2026.2.15 - Privilege Escalation
CVSS 5.5
CVE-2026-23598
MEDIUM
HPE Aruba 5G Core - Info Disclosure
CVSS 6.5
CVE-2026-24130
MEDIUM
Moonraker < 0.10.0 - LDAP Injection via Login Endpoint
CVSS 5.3
CVE-2026-1175
MEDIUM
birkir prime < 0.4.0 - Information Exposure via GraphQL Directive Handler Error Message
CVSS 5.3
CVE-2026-22646
MEDIUM
SICK incoming_goods_suite < 1.2.1 - Information Disclosure via Error Message
CVSS 4.3
CVE-2026-20838
MEDIUM
Windows Kernel - Information Disclosure via Error Message
CVSS 5.5
CVE-2025-52611
LOW
HCL iControl was affected by Unhandled Exception - Stack Trace Disclosure vulnerability
CVSS 3.1
CVE-2025-52606
MEDIUM
HCL iControl - Weak Input Validation
CVSS 4.3
CVE-2025-31960
MEDIUM
HCL BigFix Service Management (SM) is vulnerable to information exposure due to improper error handling within its reporting module
CVSS 5.3
CVE-2025-59853
LOW
HCL DFXAnalytics is affected by an Improper Error Handling vulnerability
CVSS 3.1
CVE-2025-52641
LOW
Internal Filesystem Exploration vulnerability
CVSS 2.9
CVE-2025-14243
MEDIUM
Mirror-registry: openshift mirror registry: user enumeration via authentication error messages
CVSS 5.3
CVE-2025-71282
HIGH
XenForo Path Disclosure via open_basedir Exceptions
CVSS 7.5
Details
Vulnerabilities
561
Exploit Likelihood
High