Skip to content
BackEsc
Sign in

CWE-200 · weakness in Information Disclosure

Information Exposure

11,421 CVEs · 18 exploited

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
18
check available
162
likely to be exploited
440

Every one of the 11,421 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Check Point Quantum Gateway - Information DisclosureCVE-2024-24919checkpoint · CVSS 8.6 · 100% likely

    Check Point

  2. Metabase - Local File InclusionCVE-2021-41277metabase · CVSS 10 · 97% likely

    Metabase

  3. The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x, and PIX before 7.0 allows remote…CVE-2016-6415Cisco · CVSS 7.5 · 88% likely

    Cisco

  4. MinIO Cluster Deployment - Information DisclosureCVE-2023-28432minio · CVSS 7.5 · 84% likely

    MinIO

  5. OwnCloud - Phpinfo ConfigurationCVE-2023-49103ownCloud · CVSS 10 · 78% likely

    ownCloud

  6. Vite Development Server - Path TraversalCVE-2025-31125vitejs · CVSS 5.3 · 75% likelycovered by CyberSIXT

    Vitejs1 article

  7. Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure VulnerabilityCVE-2020-3259Cisco · CVSS 7.5 · 72% likely

    Cisco

  8. The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request, aka SAP Security Note 22…CVE-2016-2388SAP · CVSS 5.3 · 52% likely

    SAP

  9. TIBCO JasperReports Server Information Disclosure VulnerabilityCVE-2018-5430TIBCO Software Inc. · CVSS 7.7 · 48% likely

    TIBCO Software Inc.

  10. Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.CVE-2008-0655Adobe · CVSS 8.8 · 38% likely

    Adobe

  11. A vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. This vulnerability is due to…CVE-2026-20133Cisco · CVSS 6.5 · 35% likelycovered by CyberSIXT

    Cisco

  12. An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, FortiOS 7…CVE-2025-68686Fortinet · CVSS 5.3 · 29% likelycovered by CyberSIXT

    Fortinet

  13. The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name information via a direct request.CVE-2015-5317Jenkins · CVSS 7.5 · 23% likely

    Jenkins

  14. Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory ad…CVE-2015-0310Adobe · CVSS 7.8 · 15% likely

    Adobe

  15. Cisco IOS XR Software Health Check Open Port VulnerabilityCVE-2022-20821Cisco · CVSS 6.5 · 11% likely

    Cisco

  16. Desktop Window Manager Information Disclosure VulnerabilityCVE-2026-20805Microsoft · CVSS 5.5 · 7.5% likely

    Microsoft

  17. An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace.CVE-2021-25369Samsung Mobile · CVSS 6.2 · 1.1% likely

    Samsung

  18. In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or insufficient UI. This could lead to lo…CVE-2023-21237Android · CVSS 6.2 · 0.3% likely

    Android

  19. Jira Server and Data Center - Information DisclosureCVE-2020-14181Atlassian · 100% likely

    Atlassian

  20. Eclipse Jetty - Information DisclosureCVE-2021-34429The Eclipse Foundation · CVSS 5.3 · 99% likely

    Eclipse Foundation

  21. Splunk <=7.0.1 - Information DisclosureCVE-2018-1140998% likely
  22. Apache Tapestry - Remote Code ExecutionCVE-2021-27850Apache Software Foundation · 94% likely

    Apache

  23. Jenkins GitHub Plugin <=1.29.1 - Server-Side Request ForgeryCVE-2018-100060091% likely
  24. Laravel <5.5.21 - Information DisclosureCVE-2017-1689487% likely
  25. Eclipse Jetty - Information DisclosureCVE-2021-28164The Eclipse Foundation · CVSS 5.3 · 82% likely

    Eclipse Foundation

  26. Eclipse Jetty ConcatServlet - Information DisclosureCVE-2021-28169The Eclipse Foundation · CVSS 5.3 · 78% likely

    Eclipse Foundation

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in