CWE-200 · Information Disclosure
Information Exposure
11,425CVEs
18exploited
162with a public check
440likely (EPSS 10%+)
SortMost likely exploited
11,425 CVEs with CWE-200 as their weakness · the first 2,000 are paged here; the Atlas names every one
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-24919In CISA KEVExploitedCheck Point Quantum Gateway - Information Disclosurecheckpoint · Check Point Quantum Gateway, Spark Gateway and CloudGuard Network · CVSS 8.6 · 2024-05-28 | 8.6 | 100% | 2024-05-28 |
| CVE-2021-41277In CISA KEVExploitedMetabase - Local File Inclusionmetabase · metabase · CVSS 10 · 2021-11-17 | 10.0 | 97% | 2021-11-17 |
| CVE-2016-6415In CISA KEVExploitedThe server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x, and PIX before 7.0 allows remote…Cisco · IOS, IOS XR, and IOS XE · CVSS 7.5 · 2016-09-19 | 7.5 | 88% | 2016-09-19 |
| CVE-2023-28432In CISA KEVExploitedMinIO Cluster Deployment - Information Disclosureminio · minio · CVSS 7.5 · 2023-03-22 | 7.5 | 84% | 2023-03-22 |
| CVE-2023-49103In CISA KEVExploitedOwnCloud - Phpinfo ConfigurationownCloud · ownCloud graphapi · CVSS 10 · 2023-11-21 | 10.0 | 78% | 2023-11-21 |
| CVE-2025-31125In CISA KEVExploitedVite Development Server - Path Traversalvitejs · vite · CVSS 5.3 · 2025-03-31 | 5.3 | 75% | 2025-03-31 |
| CVE-2020-3259In CISA KEVExploitedCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure VulnerabilityCisco · Cisco Adaptive Security Appliance (ASA) Software · CVSS 7.5 · 2020-05-06 | 7.5 | 72% | 2020-05-06 |
| CVE-2016-2388In CISA KEVExploitedThe Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request, aka SAP Security Note 22…SAP · NetWeaver · CVSS 5.3 · 2016-02-16 | 5.3 | 52% | 2016-02-16 |
| CVE-2018-5430In CISA KEVExploitedTIBCO JasperReports Server Information Disclosure VulnerabilityTIBCO Software Inc. · TIBCO JasperReports Server · CVSS 7.7 · 2018-04-17 | 7.7 | 48% | 2018-04-17 |
| CVE-2008-0655In CISA KEVExploitedMultiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.Adobe · Acrobat and Reader · CVSS 8.8 · 2008-02-07 | 8.8 | 38% | 2008-02-07 |
| CVE-2026-20133In CISA KEVExploitedA vulnerability in Cisco Catalyst SD-WAN Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. This vulnerability is due to…Cisco · Cisco Catalyst SD-WAN Manager · CVSS 6.5 · 2026-02-25 | 6.5 | 35% | 2026-02-25 |
| CVE-2025-68686In CISA KEVExploitedAn Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, FortiOS 7…Fortinet · FortiOS · CVSS 5.3 · 2026-02-10 | 5.3 | 29% | 2026-02-10 |
| CVE-2015-5317In CISA KEVExploitedThe Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name information via a direct request.Jenkins · Jenkins User Interface (UI) · CVSS 7.5 · 2015-11-25 | 7.5 | 23% | 2015-11-25 |
| CVE-2015-0310In CISA KEVExploitedAdobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory ad…Adobe · Flash Player · CVSS 7.8 · 2015-01-23 | 7.8 | 15% | 2015-01-23 |
| CVE-2022-20821In CISA KEVExploitedCisco IOS XR Software Health Check Open Port VulnerabilityCisco · Cisco IOS XR Software · CVSS 6.5 · 2022-05-26 | 6.5 | 11% | 2022-05-26 |
| CVE-2026-20805In CISA KEVExploitedDesktop Window Manager Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 5.5 · 2026-01-13 | 5.5 | 7.5% | 2026-01-13 |
| CVE-2021-25369In CISA KEVExploitedAn improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace.Samsung Mobile · Samsung Mobile Devices · CVSS 6.2 · 2021-03-26 | 6.2 | 1.1% | 2021-03-26 |
| CVE-2023-21237In CISA KEVExploitedIn applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or insufficient UI. This could lead to lo…Android · Android · CVSS 6.2 · 2023-06-28 | 6.2 | 0.3% | 2023-06-28 |
| CVE-2020-14181CheckJira Server and Data Center - Information DisclosureAtlassian · Jira Server · 2020-09-17 | – | 100% | 2020-09-17 |
| CVE-2021-34429CheckEclipse Jetty - Information DisclosureThe Eclipse Foundation · Eclipse Jetty · CVSS 5.3 · 2021-07-15 | 5.3 | 99% | 2021-07-15 |
| CVE-2018-11409CheckSplunk <=7.0.1 - Information DisclosureSplunk · Splunk · 2018-06-08 | – | 98% | 2018-06-08 |
| CVE-2021-27850CheckApache Tapestry - Remote Code ExecutionApache Software Foundation · Apache Tapestry · 2021-04-15 | – | 94% | 2021-04-15 |
| CVE-2018-1000600CheckJenkins GitHub Plugin <=1.29.1 - Server-Side Request ForgeryJenkins · Github · 2018-06-26 | – | 91% | 2018-06-26 |
| CVE-2017-16894CheckLaravel <5.5.21 - Information DisclosureLaravel · Laravel · 2017-11-20 | – | 87% | 2017-11-20 |
| CVE-2021-28164CheckEclipse Jetty - Information DisclosureThe Eclipse Foundation · Eclipse Jetty · CVSS 5.3 · 2021-04-01 | 5.3 | 82% | 2021-04-01 |
| CVE-2021-28169CheckEclipse Jetty ConcatServlet - Information DisclosureThe Eclipse Foundation · Eclipse Jetty · CVSS 5.3 · 2021-06-09 | 5.3 | 78% | 2021-06-09 |
| CVE-2018-0127CheckCisco RV132W/RV134W Router - Information DisclosureCisco · Cisco RV132W and RV134W Wireless VPN Routers · 2018-02-08 | – | 78% | 2018-02-08 |
| CVE-2021-22145CheckElasticsearch 7.10.0-7.13.3 - Information DisclosureElastic · Elasticsearch · 2021-07-21 | – | 76% | 2021-07-21 |
| CVE-2015-2080CheckEclipse Jetty <9.2.9.v20150224 - Sensitive Information LeakageEclipse · Jetty · 2016-10-07 | – | 75% | 2016-10-07 |
| CVE-2025-11749CheckWordPress AI Engine Plugin - Token Exposuretigroumeow · AI Engine – The Chatbot, AI Framework & MCP for WordPress · CVSS 9.8 · 2025-11-05 | 9.8 | 75% | 2025-11-05 |
| CVE-2025-30208CheckVite - Arbitrary File Readvitejs · vite · CVSS 5.3 · 2025-03-24 | 5.3 | 75% | 2025-03-24 |
| CVE-2026-4020CheckGravity SMTP WordPress Plugin - Sensitive Information ExposureRocketGenius · Gravity SMTP · CVSS 7.5 · 2026-03-31 | 7.5 | 74% | 2026-03-31 |
| CVE-2018-7251CheckAnchor CMS 0.12.3 - Error Log ExposureAnchorcms · Anchor · 2018-02-19 | – | 72% | 2018-02-19 |
| CVE-2021-39327CheckWordPress BulletProof Security 5.1 Information DisclosureAITpro · BulletProof Security · CVSS 5.3 · 2021-09-17 | 5.3 | 72% | 2021-09-17 |
| CVE-2018-18778CheckACME mini_httpd <1.30 - Local File InclusionAcme · Mini-Httpd · 2018-10-29 | – | 71% | 2018-10-29 |
| CVE-2023-50290CheckApache Solr - Host Environment Variables Leak via Metrics APIApache Software Foundation · Apache Solr · CVSS 6.5 · 2024-01-15 | 6.5 | 68% | 2024-01-15 |
| CVE-2024-0305CheckNcast busiFacade - Remote Command ExecutionGuangzhou Yingke Electronic Technology · Ncast · CVSS 5.3 · 2024-01-08 | 5.3 | 67% | 2024-01-08 |
| CVE-2017-11165CheckDataTaker DT80 dEX 1.50.012 - Information DisclosureThermofisher · Dt80 Dex Firmware · 2017-07-12 | – | 64% | 2017-07-12 |
| CVE-2023-50968CheckApache OFBiz < 18.12.11 - Server Side Request ForgeryApache Software Foundation · Apache OFBiz · 2023-12-26 | – | 63% | 2023-12-26 |
| CVE-2015-8399CheckAtlassian Confluence <5.8.17 - Information DisclosureAtlassian · Confluence · 2016-04-11 | – | 60% | 2016-04-11 |
| CVE-2018-8770CheckCobub Razor 0.8.0 - Information DisclosureCobub · Razor · 2018-03-18 | – | 59% | 2018-03-18 |
| CVE-2023-50720CheckXWiki < 4.10.15 - Email Disclosurexwiki · xwiki-platform · CVSS 5.3 · 2023-12-15 | 5.3 | 59% | 2023-12-15 |
| CVE-2021-32819CheckNodejs Squirrelly - Remote Code Executionsquirrellyjs · squirrelly · CVSS 8 · 2021-05-14 | 8.0 | 58% | 2021-05-14 |
| CVE-2018-12634CheckCirCarLife Scada <4.3 - System Log ExposureCircontrol · Circarlife Scada · 2018-06-22 | – | 56% | 2018-06-22 |
| CVE-2024-45388CheckHoverfly < 1.10.3 - Arbitrary File ReadSpectoLabs · hoverfly · CVSS 7.5 · 2024-09-02 | 7.5 | 56% | 2024-09-02 |
| CVE-2018-7662CheckCouchCMS <= 2.0 - Path DisclosureCouchcms · Couch · 2018-03-04 | – | 47% | 2018-03-04 |
| CVE-2024-46938CheckSitecore Experience Platform <= 10.4 - Arbitrary File ReadSitecore · Experience Commerce · CVSS 7.5 · 2024-09-15 | 7.5 | 47% | 2024-09-15 |
| CVE-2023-4168CheckAdlisting Classified Ads 2.14.0 - Information DisclosureTemplatecookie · Adlisting · CVSS 4.3 · 2023-08-05 | 4.3 | 46% | 2023-08-05 |
| CVE-2024-6646CheckNetgear-WN604 downloadFile.php - Information DisclosureNetgear · WN604 · CVSS 5.3 · 2024-07-10 | 5.3 | 46% | 2024-07-10 |
| CVE-2022-22733CheckApache ShardingSphere ElasticJob-UI privilege escalationApache Software Foundation · Apache ShardingSphere ElasticJob-UI · 2022-01-20 | – | 42% | 2022-01-20 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.