Information Disclosure

Every one of the 2 is a mark on the map. Named now: 1 to 2, most at risk first.

1. A vulnerability in the API of SonarSource SonarQube before 7.4 could allow an authenticated user to discover sensitive information such as valid user-account logins in the web app…CVE-2018-19413Sonarsource · 1.1% likely

   CWE-200

2. In SonarQube before 10.4 and 9.9.4 LTA, encrypted values generated using the Settings Encryption feature are potentially exposed in cleartext as part of the URL parameters in the…CVE-2024-38460Sonarsource · CVSS 4.9 · 0.3% likely

   CWE-532

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.