CWE-497

Exposure of Sensitive System Information to an Unauthorized Control Sphere

Parent: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.

311 vulnerabilities with CWE-497
CVE-2025-2598 MEDIUM
AWS CDK CLI - Info Disclosure
CVSS 5.5
CVE-2025-23382 MEDIUM
Dell Secure Connect Gateway (SCG) 5.0 Appliance - Info Disclosure
CVSS 5.5
CVE-2025-26911 MEDIUM
Bowo System Dashboard <2.8.18 - Info Disclosure
CVSS 4.3
CVE-2025-26758 MEDIUM
RebelCode Spotlight Social Media Feeds <1.7.1 - Info Disclosure
CVSS 5.3
CVE-2025-1212 MEDIUM
GitLab CE/EE <17.6.5-17.8.2 - Info Disclosure
CVSS 4.3
CVE-2025-1144 CRITICAL
School Affairs System - Info Disclosure
CVSS 9.8
CVE-2025-22222 HIGH
VMware Aria Operations - Info Disclosure
CVSS 7.7
CVE-2025-0061 HIGH
SAP BusinessObjects - Info Disclosure
CVSS 8.7
CVE-2025-0059 MEDIUM
SAP GUI for HTML - Info Disclosure
CVSS 6.0
CVE-2025-0056 MEDIUM
SAP GUI for Java - Info Disclosure
CVSS 6.0
CVE-2025-0055 MEDIUM
SAP GUI for Windows - Info Disclosure
CVSS 6.0
CVE-2024-58320 MEDIUM
Kentico Xperience < 13.0.159 - Information Disclosure
CVSS 5.3
CVE-2024-13998 MEDIUM
Nagios XI <2024R1.1.3 - Info Disclosure
CVSS 6.5
CVE-2024-13999 CRITICAL
Nagios XI <2024R1.1.3 - Info Disclosure
CVSS 9.8
CVE-2024-13995 HIGH
Nagios XI <2024R1.1.2 - Info Disclosure
CVSS 8.8
CVE-2024-12367 HIGH
Vegagrup Software Vega Master <20250916 - Info Disclosure
CVSS 8.6
CVE-2024-51770 HIGH
HPE AutoPass License Server <9.17 - Info Disclosure
CVSS 7.5
CVE-2024-45549 HIGH
Qualcomm Sm8550p Firmware - Information Disclosure
CVSS 7.7
CVE-2024-8313 HIGH
B&R APROL <4.4-00P5 - Info Disclosure
CVE-2024-10940 MEDIUM
Langchain-core <0.1.53,<0.2.43,<0.3.15 - Info Disclosure
CVSS 5.3
CVE-2024-52905 LOW
IBM Sterling B2B Integrator <6.1.2.6, <6.2.0.3 - Info Disclosure
CVSS 2.7
CVE-2024-11035 LOW
Carbon Black Cloud Windows Sensor <4.0.3 - Info Disclosure
CVSS 2.5
CVE-2024-8550 HIGH
modelscope/agentscope <0.0.4 - LFI
CVSS 7.5
CVE-2024-36554 CRITICAL
Forever KidsWatch - Info Disclosure
CVSS 9.8
CVE-2024-37526 MEDIUM
IBM Watson Query - Info Disclosure
CVSS 6.5
Details
Vulnerabilities 311
Links
MITRE CWE Entry Search this CWE With Exploits