CWE-497
Exposure of Sensitive System Information to an Unauthorized Control Sphere
The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.
367 vulnerabilities with CWE-497
CVE-2025-66056
MEDIUM
Uncanny Automator <6.10.0 - Info Disclosure
CVSS 4.3
CVE-2025-36160
MEDIUM
IBM Concert <2.0.0 - Info Disclosure
CVSS 5.3
CVE-2025-13160
MEDIUM
IQ-Support - Unauthenticated Sensitive Information Exposure via API
CVSS 5.3
CVE-2025-64267
MEDIUM
WPSwings WooCommerce Ultimate Points And Rewards <2.10.3 - Info Dis...
CVSS 4.3
CVE-2025-27368
MEDIUM
IBM OpenPages 9.0-9.1 - Info Disclosure
CVSS 4.3
CVE-2025-12779
HIGH
Amazon WorkSpaces client <2024.8 - Info Disclosure
CVSS 8.8
CVE-2025-34283
MEDIUM
Nagios XI <2024R1.4.2 - Info Disclosure
CVSS 6.5
CVE-2025-54459
HIGH
Hospital Manager Backend Services <Sep 19, 2025 - Info Disclosure
CVSS 7.5
CVE-2025-64228
MEDIUM
SUMO Affiliates Pro <11.0.0 - Info Disclosure
CVSS 4.3
CVE-2025-43024
HIGH
HP ThinPro - Unauthenticated Exposure of Sensitive System Information via GUI Dialog
CVSS 7.5
CVE-2025-62524
MEDIUM
PILOS < 4.8.0 - PHP Version Exposure via X-Powered-By Header
CVSS 5.3
CVE-2025-62902
MEDIUM
ThemeHunk WP Popup Builder <1.3.7 - Info Disclosure
CVSS 5.3
CVE-2025-34156
MEDIUM
Tibbo AggreGate Network Manager < 6.40.05 - Info Disclosure
CVE-2025-47699
CRITICAL
Gallagher Morpho <9.30.2482, <9.20.2819, <9.10.3672, <9.00.3831, <=...
CVSS 9.9
CVE-2025-59575
MEDIUM
Stylemix MasterStudy LMS <3.6.20 - Info Disclosure
CVSS 4.9
CVE-2025-52752
MEDIUM
ThemeAtelier IDonatePro <2.1.9 - Info Disclosure
CVSS 6.5
CVE-2025-11151
HIGH
CityPLus <V24.29500.1.0 - Info Disclosure
CVSS 8.2
CVE-2025-52616
MEDIUM
HCL Unica 12.1.10 - Info Disclosure
CVSS 5.3
CVE-2025-4614
LOW
Palo Alto Networks PAN-OS - Info Disclosure
CVSS 2.7
CVE-2025-44823
CRITICAL
Nagios Log Server <2024R1.3.2 - Info Disclosure
CVSS 9.9
CVE-2025-59447
LOW
YoSmart YoLink Smart Hub 0382 - Info Disclosure
CVSS 2.2
CVE-2025-58585
MEDIUM
Sick Analytics Products - Information Disclosure
CVSS 5.3
CVE-2025-58583
MEDIUM
SICK Enterprise Analytics - Exposure of Sensitive System Information via H2 Database
CVSS 5.3
CVE-2025-58579
MEDIUM
Sick Analytics Products - User Enumeration via Unauthenticated Endpoint
CVSS 5.3
CVE-2025-60167
MEDIUM
Page Manager for Elementor <2.0.5 - Info Disclosure
CVSS 4.3
Details
Vulnerabilities
367