CWE-213 · Information Disclosure
Exposure of Sensitive Information Due to Incompatible Policies
34CVEs
SortMost likely exploited
34 CVEs with CWE-213 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2019-10247In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured…The Eclipse Foundation · Eclipse Jetty · 2019-04-22 | – | 5.9% | 2019-04-22 |
| CVE-2019-10246In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a re…The Eclipse Foundation · Eclipse Jetty · 2019-04-22 | – | 4.1% | 2019-04-22 |
| CVE-2019-1010283Univention Corporate Server univention-directory-notifier 12.0.1-3 and earlier is affected by: CWE-213: Intentional Information Exposure. The impact is: Loss of Confidentiality. T…Univention Corporate Server · univention-directory-notifier · 2019-07-17 | – | 1.4% | 2019-07-17 |
| CVE-2025-54831Apache Airflow: Connection sensitive details exposed to users with READ permissionsApache Software Foundation · Apache Airflow · CVSS 6.5 · 2025-09-26 | 6.5 | 1.0% | 2025-09-26 |
| CVE-2017-3211Centire Yopify leaks customer informationCentire · Yopify · CVSS 5.3 · 2020-01-15 | 5.3 | 0.8% | 2020-01-15 |
| CVE-2022-22541SAP BusinessObjects Business Intelligence Platform - versions 420, 430, may allow legitimate users to access information they shouldn't see through relational or OLAP connections.…SAP SE · SAP BusinessObjects Business Intelligence Platform · 2022-04-12 | – | 0.8% | 2022-04-12 |
| CVE-2020-1652Junos Space: OpenNMS is accessible via port 9443Juniper Networks · Junos Space · CVSS 5.6 · 2020-07-17 | 5.6 | 0.7% | 2020-07-17 |
| CVE-2022-30350Avanquest Software RAD PDF (PDFEscape Online) 3.19.2.2 is vulnerable to Information Leak / Disclosure. The PDFEscape Online tool provides users with a "white out" functionality fo…Avanquest · Pdfescape · CVSS 7.5 · 2023-03-30 | 7.5 | 0.7% | 2023-03-30 |
| CVE-2023-3441Exposure of Sensitive Information Due to Incompatible Policies in GitLabGitLab · GitLab · CVSS 6.6 · 2024-10-01 | 6.6 | 0.7% | 2024-10-01 |
| CVE-2024-7267Internal infrastructure data leak in EZD RPNaukowa i Akademicka Sieć Komputerowa - Państwowy Instytut… · EZD RP · CVSS 7.1 · 2024-08-07 | 7.1 | 0.6% | 2024-08-07 |
| CVE-2023-40570Datasette 1.0 alpha series leaks names of databases and tables to unauthenticated userssimonw · datasette · CVSS 5.3 · 2023-08-25 | 5.3 | 0.6% | 2023-08-25 |
| CVE-2025-4976Exposure of Sensitive Information Due to Incompatible Policies in GitLabGitLab · GitLab · CVSS 4.3 · 2025-07-24 | 4.3 | 0.5% | 2025-07-24 |
| CVE-2023-36919Information Disclosure in SAP Enable NowSAP_SE · SAP Enable Now · CVSS 5.3 · 2023-07-11 | 5.3 | 0.5% | 2023-07-11 |
| CVE-2023-6517Seeing the SMS Verification Code in Mia Technology's Mia-MedMia Technology Inc. · MİA-MED · CVSS 7.5 · 2024-02-08 | 7.5 | 0.5% | 2024-02-08 |
| CVE-2026-55425Graylog: System Catalog titles endpoint can be used to retrieve values of protected database fieldsGraylog2 · graylog2-server · CVSS 5 · 2026-08-28 | 5.0 | 0.4% | 2026-08-28 |
| CVE-2024-41786IBM Engineering Requirements Management DOORS Next for J2EE File Disclosure RuleIBM · Engineering Requirements Management DOORS Next · CVSS 5.3 · 2026-11-08 | 5.3 | 0.4% | 2026-11-08 |
| CVE-2026-6280Improper Access Control in Nomysoft Informatics' NomysemNOMYSOFT Informatics Education and Consulting Inc. · Nomysem · CVSS 6.5 · 2026-07-08 | 6.5 | 0.4% | 2026-07-08 |
| CVE-2024-49354IBM Concert information disclosureIBM · Concert Software · CVSS 5.3 · 2025-01-18 | 5.3 | 0.3% | 2025-01-18 |
| CVE-2023-5117Exposure of Sensitive Information Due to Incompatible Policies in GitLabGitLab · GitLab · CVSS 3.7 · 2024-12-25 | 3.7 | 0.3% | 2024-12-25 |
| CVE-2025-24316Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Exposure of Sensitive Information Due to Incompatible PoliciesDario Health · Dario Application Database and Internet-based Server Infrastructure · CVSS 5.3 · 2025-02-28 | 5.3 | 0.3% | 2025-02-28 |
| CVE-2025-52603HCL Connections is vulnerable to information disclosureHCLSoftware · Connections · CVSS 3.5 · 2026-02-20 | 3.5 | 0.3% | 2026-02-20 |
| CVE-2025-32791Permission policy information leakage in Backstage permission systembackstage · backstage · CVSS 4.3 · 2025-04-16 | 4.3 | 0.3% | 2025-04-16 |
| CVE-2024-44121Information Disclosure in SAP S/4 HANA (Statutory Reports)SAP_SE · SAP S/4 HANA (Statutory Reports) · CVSS 4.3 · 2024-09-10 | 4.3 | 0.3% | 2024-09-10 |
| CVE-2023-27465A vulnerability has been identified in SIMOTION C240 (All versions >= V5.4 < V5.5 SP1), SIMOTION C240 PN (All versions >= V5.4 < V5.5 SP1), SIMOTION D410-2 DP (All versions >= V5.…Siemens · SIMOTION C240 · CVSS 4.6 · 2023-06-13 | 4.6 | 0.3% | 2023-06-13 |
| CVE-2026-56538HCL Connections is vulnerable to information disclosureHCLSoftware · Connections · CVSS 3.5 · 2026-07-27 | 3.5 | 0.3% | 2026-07-27 |
| CVE-2024-49827IBM Concert Software information disclosureIBM · Concert Software · CVSS 3.7 · 2025-08-18 | 3.7 | 0.3% | 2025-08-18 |
| CVE-2022-39848Exposure of sensitive information in AT_Distributor prior to SMR Oct-2022 Release 1 allows local attacker to access SerialNo via log.Samsung Mobile · Samsung Mobile Devices · CVSS 4 · 2022-10-07 | 4.0 | 0.1% | 2022-10-07 |
| CVE-2022-30728Information exposure vulnerability in ScanPool prior to SMR Jun-2022 Release 1 allows local attackers to get MAC address information.Samsung Mobile · Samsung Mobile Devices · CVSS 1.9 · 2022-06-07 | 1.9 | 0.1% | 2022-06-07 |
| CVE-2022-30714Information exposure vulnerability in SemIWCMonitor prior to SMR Jun-2022 Release 1 allows local attackers to get MAC address information.Samsung Mobile · Samsung Mobile Devices · CVSS 1.9 · 2022-06-07 | 1.9 | 0.1% | 2022-06-07 |
| CVE-2022-33696Exposure of Sensitive Information in Telephony service prior to SMR Jul-2022 Release 1 allows local attacker to access imsi and iccid via log.Samsung Mobile · Samsung Mobile Devices · CVSS 4 · 2022-07-11 | 4.0 | 0.1% | 2022-07-11 |
| CVE-2022-33694Exposure of Sensitive Information in CSC application prior to SMR Jul-2022 Release 1 allows local attacker to access wifi information via unprotected intent broadcasting.Samsung Mobile · Samsung Mobile Devices · CVSS 4 · 2022-07-11 | 4.0 | 0.1% | 2022-07-11 |
| CVE-2022-33692Exposure of Sensitive Information in Messaging application prior to SMR Jul-2022 Release 1 allows local attacker to access imsi and iccid via log.Samsung Mobile · Samsung Mobile Devices · CVSS 4 · 2022-07-11 | 4.0 | 0.1% | 2022-07-11 |
| CVE-2026-0893Uncleared Password Keystrokes VulnerabilityAMI · AptioV · CVSS 5.8 · 2026-10-13 | 5.8 | 0.1% | 2026-10-13 |
| CVE-2022-28794Sensitive information exposure in low-battery dumpstate log prior to SMR Jun-2022 Release 1 allows local attackers to get SIM card information.Samsung Mobile · Samsung Mobile Devices · CVSS 2.2 · 2022-06-07 | 2.2 | 0.1% | 2022-06-07 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.