CWE-497

Exposure of Sensitive System Information to an Unauthorized Control Sphere

Parent: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.

368 vulnerabilities with CWE-497
CVE-2025-60167 MEDIUM
Page Manager for Elementor <2.0.5 - Info Disclosure
CVSS 4.3
CVE-2025-60119 MEDIUM
CoSchedule <3.3.10 - Info Disclosure
CVSS 5.3
CVE-2025-60092 MEDIUM
Shahjada Download Manager <3.3.24 - Info Disclosure
CVSS 5.3
CVE-2025-59582 MEDIUM
Ajax Load More <7.6.0.2 - Info Disclosure
CVSS 5.3
CVE-2025-58015 MEDIUM
Ays Pro Quiz Maker <6.7.0.61 - Info Disclosure
CVSS 5.3
CVE-2025-58007 MEDIUM
NerdPress Social Pug <1.35.1 - Info Disclosure
CVSS 4.3
CVE-2025-57937 MEDIUM
WPeMatico RSS Feed Fetcher <2.8.10 - Info Disclosure
CVSS 4.3
CVE-2025-57916 MEDIUM
Nurul Amin WP System Information <1.5 - Info Disclosure
CVSS 4.3
CVE-2025-36146 MEDIUM
IBM watsonx.data 2.2 - Authenticated Sensitive Information Exposure
CVSS 4.3
CVE-2025-4235 HIGH
Palo Alto Networks User-ID Credential Agent - Info Disclosure
CVE-2025-10264 CRITICAL
Digiever Multiple Models < *.*.*.78 - Unauthenticated Sensitive Information Exposure
CVSS 10.0
CVE-2025-6769 MEDIUM
GitLab CE/EE <18.1.6-18.3.2 - Info Disclosure
CVSS 4.3
CVE-2025-9364 HIGH
FactoryTalk Analytics LogixAI - Exposure of Sensitive System Information via Over-Permissive Redis Instance
CVSS 8.8
CVE-2025-58866 LOW
Rami Yushuvaev Site Info <1.1 - Info Disclosure
CVSS 2.7
CVE-2025-58797 MEDIUM
Ninja Charts <3.3.2 - Info Disclosure
CVSS 5.3
CVE-2025-2667 LOW
IBM Sterling B2B Integrator <6.2.0.5 - Info Disclosure
CVSS 2.7
CVE-2025-36162 MEDIUM
IBM DevOps Deploy/UCD <8.1.2.2 - Info Disclosure
CVSS 4.3
CVE-2025-8700 MEDIUM
Invoice Ninja - Privilege Escalation
CVE-2025-8597 MEDIUM
MacVim < r181.2 - Unauthorized Debugger Attachment and Memory Access via get-task-allow Entitlement
CVE-2025-57888 MEDIUM
NooTheme Jobmonster <4.8.0 - Info Disclosure
CVSS 5.3
CVE-2025-27721 HIGH
INFINITT PACS System Manager - Info Disclosure
CVSS 7.5
CVE-2025-48355 MEDIUM
ProveSource Social Proof <3.0.5 - Info Disclosure
CVSS 5.3
CVE-2025-2988 LOW
IBM Sterling B2B Integrator & File Gateway <6.2.1 - Info Disclosure
CVSS 2.7
CVE-2025-54736 MEDIUM
NordicMade Savoy <3.0.8 - Info Disclosure
CVSS 5.3
CVE-2025-23288 LOW
NVIDIA GPU Display Driver - Info Disclosure
CVSS 3.3
Details
Vulnerabilities 368
Links
MITRE CWE Entry Search this CWE With Exploits