CWE-219 · Information Disclosure
Storage of File with Sensitive Data Under Web Root
6CVEs
SortMost likely exploited
6 CVEs with CWE-219 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-56159CheckAstro - Information Disclosurewithastro · astro · CVSS 7.8 · 2024-12-19 | 7.8 | 1.5% | 2024-12-19 |
| CVE-2002-2024Horde IMP 2.2.7 allows remote attackers to obtain the full web root pathname via an HTTP request for (1) poppassd.php3, (2) login.php3?reason=chpass2, (3) spelling.php3, and (4) l…Horde · Imp · CVSS 5.3 · 2005-07-14 | 5.3 | 1.9% | 2005-07-14 |
| CVE-2022-21236An information disclosure vulnerability exists due to a web server misconfiguration in the Reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to a dis…Reolink · Rlc-410w Firmware · CVSS 8.1 · 2022-01-28 | 8.1 | 1.8% | 2022-01-28 |
| CVE-2022-36306An authenticated attacker can enumerate and download sensitive files, including the eNodeB's web management UI's TLS private key, the web server binary, and the web server configu…Airspan · AirVelocity · 2022-08-16 | – | 1.0% | 2022-08-16 |
| CVE-2023-39467Triangle MicroWorks SCADA Data Gateway certificate Information Disclosure VulnerabilityTriangle MicroWorks · SCADA Data Gateway · CVSS 5.3 · 2024-05-03 | 5.3 | 0.6% | 2024-05-03 |
| CVE-2024-39776Avtec Outpost Storage of File with Sensitive Data Under Web RootAvtec · Outpost 0810 · CVSS 7.5 · 2024-08-22 | 7.5 | 0.4% | 2024-08-22 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.