CWE-497

Exposure of Sensitive System Information to an Unauthorized Control Sphere

Parent: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.

311 vulnerabilities with CWE-497
CVE-2025-27368 MEDIUM
IBM OpenPages 9.0-9.1 - Info Disclosure
CVSS 4.3
CVE-2025-12779 HIGH
Amazon WorkSpaces client <2024.8 - Info Disclosure
CVSS 8.8
CVE-2025-34283 MEDIUM
Nagios XI <2024R1.4.2 - Info Disclosure
CVSS 6.5
CVE-2025-54459 HIGH
Hospital Manager Backend Services <Sep 19, 2025 - Info Disclosure
CVSS 7.5
CVE-2025-64228 MEDIUM
SUMO Affiliates Pro <11.0.0 - Info Disclosure
CVSS 4.3
CVE-2025-43024 HIGH
App <version> - Info Disclosure
CVSS 7.5
CVE-2025-62524 MEDIUM
THM Pilos < 4.8.0 - Information Disclosure
CVSS 5.3
CVE-2025-62902 MEDIUM
ThemeHunk WP Popup Builder <1.3.7 - Info Disclosure
CVSS 5.3
CVE-2025-34156 MEDIUM
Tibbo AggreGate Network Manager < 6.40.05 - Info Disclosure
CVE-2025-47699 CRITICAL
Gallagher Morpho <9.30.2482, <9.20.2819, <9.10.3672, <9.00.3831, <=...
CVSS 9.9
CVE-2025-59575 MEDIUM
Stylemix MasterStudy LMS <3.6.20 - Info Disclosure
CVSS 4.9
CVE-2025-52752 MEDIUM
ThemeAtelier IDonatePro <2.1.9 - Info Disclosure
CVSS 6.5
CVE-2025-11151 HIGH
CityPLus <V24.29500.1.0 - Info Disclosure
CVSS 8.2
CVE-2025-52616 MEDIUM
HCL Unica 12.1.10 - Info Disclosure
CVSS 5.3
CVE-2025-4614 LOW
Palo Alto Networks PAN-OS - Info Disclosure
CVSS 2.7
CVE-2025-44823 CRITICAL
Nagios Log Server <2024R1.3.2 - Info Disclosure
CVSS 9.9
CVE-2025-59447 LOW
YoSmart YoLink Smart Hub 0382 - Info Disclosure
CVSS 2.2
CVE-2025-58585 MEDIUM
Sick Analytics Products - Information Disclosure
CVSS 5.3
CVE-2025-58583 MEDIUM
Application - Info Disclosure
CVSS 5.3
CVE-2025-58579 MEDIUM
Sick Analytics Products - User Enumeration via Unauthenticated Endpoint
CVSS 5.3
CVE-2025-60167 MEDIUM
Page Manager for Elementor <2.0.5 - Info Disclosure
CVSS 4.3
CVE-2025-60119 MEDIUM
CoSchedule <3.3.10 - Info Disclosure
CVSS 5.3
CVE-2025-60092 MEDIUM
Shahjada Download Manager <3.3.24 - Info Disclosure
CVSS 5.3
CVE-2025-59582 MEDIUM
Ajax Load More <7.6.0.2 - Info Disclosure
CVSS 5.3
CVE-2025-58015 MEDIUM
Ays Pro Quiz Maker <6.7.0.61 - Info Disclosure
CVSS 5.3
Details
Vulnerabilities 311
Links
MITRE CWE Entry Search this CWE With Exploits