CWE-359 · Information Disclosure
Exposure of Private Personal Information to an Unauthorized Actor
208CVEs
0exploited
8with a public check
1likely (EPSS 10%+)
SortMost likely exploited
208 CVEs with CWE-359 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-50719CheckXWiki < 4.10.15 - Sensitive Information Disclosurexwiki · xwiki-platform · CVSS 7.5 · 2023-12-15 | 7.5 | 84% | 2023-12-15 |
| CVE-2022-0482CheckEasy!Appointments <1.4.3 - Broken Access Controlalextselegidis · alextselegidis/easyappointments · CVSS 9.1 · 2022-03-09 | 9.1 | 44% | 2022-03-09 |
| CVE-2022-24819CheckXWiki < 12.10.11, 13.4.4 & 13.9-rc-1 - Information Disclosurexwiki · xwiki-platform · CVSS 5.3 · 2022-04-08 | 5.3 | 3.2% | 2022-04-08 |
| CVE-2024-11396CheckEvent Monster <= 1.4.3 - Information Exposure Via Visitors List Exportawordpresslife · Event Monster – Manager & Ticket Booking · CVSS 5.3 · 2025-01-13 | 5.3 | 2.1% | 2025-01-13 |
| CVE-2026-48048CheckXWiki Platform - Password Hash Disclosurexwiki · xwiki-platform · CVSS 7.5 · 2026-08-10 | 7.5 | 2.0% | 2026-08-10 |
| CVE-2025-54125CheckXWiki XML View - Sensitive Information Exposurexwiki · xwiki-platform · CVSS 8.7 · 2025-08-05 | 8.7 | 1.5% | 2025-08-05 |
| CVE-2025-51586CheckPrestaShop - Information DisclosurePrestashop · Prestashop · CVSS 3.7 · 2025-09-08 | 3.7 | 0.8% | 2025-09-08 |
| CVE-2025-12536CheckSureForms <= 1.13.1 - Sensitive Information Exposurebrainstormforce · SureForms – Contact Form, Payment Form & Other Custom Form Builder · CVSS 5.3 · 2025-11-13 | 5.3 | 0.8% | 2025-11-13 |
| CVE-2023-36052Azure CLI REST Command Information Disclosure VulnerabilityMicrosoft · Azure App Service · CVSS 8.6 · 2023-11-14 | 8.6 | 21% | 2023-11-14 |
| CVE-2021-22876curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header. libc…Haxx · https://github.com/curl/curl · CVSS 5.3 · 2021-04-01 | 5.3 | 5.3% | 2021-04-01 |
| CVE-2026-28950A logging issue was addressed with improved data redaction. This issue is fixed in iOS 15.8.8 and iPadOS 15.8.8, iOS 16.7.16 and iPadOS 16.7.16, iOS 18.7.8 and iPadOS 18.7.8, iOS…Apple · iOS and iPadOS · CVSS 6.2 · 2026-04-22 | 6.2 | 2.9% | 2026-04-22 |
| CVE-2022-0155Exposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirectsfollow-redirects · follow-redirects/follow-redirects · CVSS 8 · 2022-01-10 | 8.0 | 2.6% | 2022-01-10 |
| CVE-2023-28303Windows Snipping Tool Information Disclosure VulnerabilityMicrosoft · Snipping Tool · CVSS 3.3 · 2023-06-13 | 3.3 | 2.0% | 2023-06-13 |
| CVE-2019-15623Exposure of Private Information in Nextcloud Server 16.0.1 causes the server to send it's domain and user IDs to the Nextcloud Lookup Server without any further data when the Look…Nextcloud · Nextcloud Server · 2020-02-04 | – | 1.9% | 2020-02-04 |
| CVE-2017-16769Exposure of private information vulnerability in Photo Viewer in Synology Photo Station 6.8.1-3458 allows remote attackers to obtain metadata from password-protected photographs v…Synology · Synology Photo Station · 2018-02-23 | – | 1.9% | 2018-02-23 |
| CVE-2021-28559Adobe Acrobat Reader privacy violation vulnerability could lead to privilege escalationAdobe · Acrobat Reader · CVSS 5.3 · 2021-09-02 | 5.3 | 1.6% | 2021-09-02 |
| CVE-2021-3980Exposure of Private Personal Information to an Unauthorized Actor in elgg/elggelgg · elgg/elgg · CVSS 5.3 · 2021-12-03 | 5.3 | 1.6% | 2021-12-03 |
| CVE-2024-30056Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityMicrosoft · Microsoft Edge (Chromium-based) · CVSS 7.1 · 2024-05-25 | 7.1 | 1.6% | 2024-05-25 |
| CVE-2023-36018Visual Studio Code Jupyter Extension Spoofing VulnerabilityMicrosoft · Jupyter Extension for Visual Studio Code · CVSS 7.8 · 2023-11-14 | 7.8 | 1.5% | 2023-11-14 |
| CVE-2024-26192Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityMicrosoft · Microsoft Edge (Chromium-based) · CVSS 8.2 · 2024-02-23 | 8.2 | 1.5% | 2024-02-23 |
| CVE-2022-35932Missing rate limit when trying to join a password protected Nextcloud Talk conversationnextcloud · security-advisories · CVSS 3.5 · 2022-08-12 | 3.5 | 1.4% | 2022-08-12 |
| CVE-2022-2921Exposure of Private Personal Information to an Unauthorized Actor in notrinos/notrinoserpnotrinos · notrinos/notrinoserp · CVSS 8.8 · 2022-08-21 | 8.8 | 1.4% | 2022-08-21 |
| CVE-2025-43227This issue was addressed through improved state management. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6…Apple · Safari · CVSS 7.5 · 2025-07-29 | 7.5 | 1.3% | 2025-07-29 |
| CVE-2024-29987Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityMicrosoft · Microsoft Edge (Chromium-based) · CVSS 6.5 · 2024-04-18 | 6.5 | 1.2% | 2024-04-18 |
| CVE-2022-1365Exposure of Private Personal Information to an Unauthorized Actor in lquixada/cross-fetchlquixada · lquixada/cross-fetch · CVSS 8.8 · 2022-04-15 | 8.8 | 1.2% | 2022-04-15 |
| CVE-2022-20942A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA), Cisco Secure Email and Web Manager, and Cisco Secure Web Appliance, formerly known a…Cisco · Cisco Secure Web Appliance · CVSS 6.5 · 2022-11-03 | 6.5 | 1.1% | 2022-11-03 |
| CVE-2023-44156Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.Acronis · Acronis Cyber Protect 15 · CVSS 5.7 · 2023-09-27 | 5.7 | 1.0% | 2023-09-27 |
| CVE-2022-24820Unauthenticated user can list hidden document from multiple velocity templatesxwiki · xwiki-platform · CVSS 5.3 · 2022-04-08 | 5.3 | 1.0% | 2022-04-08 |
| CVE-2022-24890Exposure of Private Personal Information to an Unauthorized Actor in Nextcloud Talknextcloud · security-advisories · CVSS 2.4 · 2022-05-17 | 2.4 | 0.9% | 2022-05-17 |
| CVE-2024-40796A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, macOS Monterey 12.7.6, macOS Sonoma 14.6,…Apple · iOS and iPadOS · CVSS 5.3 · 2024-07-29 | 5.3 | 0.9% | 2024-07-29 |
| CVE-2021-21823An information disclosure vulnerability exists in the Friend finder functionality of GmbH Komoot version 10.26.9 up to 11.1.11. A specially crafted series of network requests can…Komoot · Komoot · CVSS 5.3 · 2021-08-20 | 5.3 | 0.9% | 2021-08-20 |
| CVE-2026-83528Exposure of PII in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to leak GDPR protected user informati…Ivanti · Endpoint Manager Mobile · CVSS 4.9 · 2026-11-10 | 4.9 | 0.9% | 2026-11-10 |
| CVE-2021-46687JFrog Artifactory prior to version 7.31.10 and 6.23.38 is vulnerable to Sensitive Data Exposure through the Project Administrator REST API. This issue affects: JFrog JFrog Artifac…JFrog · JFrog Artifactory · CVSS 4.9 · 2022-07-06 | 4.9 | 0.9% | 2022-07-06 |
| CVE-2025-34441AVideo < 20.1 User Information Disclosure via Public APIWorld Wide Broadcast Network · AVideo · CVSS 6.9 · 2025-12-17 | 6.9 | 0.9% | 2025-12-17 |
| CVE-2022-41971Nextcloud Talk guests can continue to receive video streams from call after being removed from a conversationnextcloud · security-advisories · CVSS 4.8 · 2022-12-01 | 4.8 | 0.9% | 2022-12-01 |
| CVE-2022-24719Unauthorized forwarding of confidential headers in fluture-nodefluture-js · fluture-node · CVSS 2.6 · 2022-03-01 | 2.6 | 0.8% | 2022-03-01 |
| CVE-2024-27881A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. An app m…Apple · macOS · CVSS 5.3 · 2024-07-29 | 5.3 | 0.8% | 2024-07-29 |
| CVE-2025-49715Dynamics 365 FastTrack Implementation Assets Information Disclosure VulnerabilityMicrosoft · Dynamics 365 FastTrack Implementation · CVSS 7.5 · 2025-06-20 | 7.5 | 0.8% | 2025-06-20 |
| CVE-2022-41936Exposure of Private Personal Information to an Unauthorized Actor in xwiki-platform-rest-serverxwiki · xwiki-platform · CVSS 5.3 · 2022-11-22 | 5.3 | 0.8% | 2022-11-22 |
| CVE-2023-26041Nextcloud Talk messages can still be seen on conversation after expiring when cron is misconfigurednextcloud · security-advisories · CVSS 2.6 · 2023-02-27 | 2.6 | 0.8% | 2023-02-27 |
| CVE-2025-0683Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Contec Health CMS8000 Patient MonitorContec Health · CMS8000 Patient Monitor · CVSS 5.9 · 2025-01-30 | 5.9 | 0.8% | 2025-01-30 |
| CVE-2023-22918A post-authentication information exposure vulnerability in the CGI program of Zyxel ATP series firmware versions 4.32 through 5.35, USG FLEX series firmware versions 4.50 through…Zyxel · ATP series firmware · CVSS 6.5 · 2023-04-24 | 6.5 | 0.8% | 2023-04-24 |
| CVE-2023-35151XWiki Platform may show email addresses in clear in REST resultsxwiki · xwiki-platform · CVSS 7.5 · 2023-06-23 | 7.5 | 0.7% | 2023-06-23 |
| CVE-2023-29203Unauthenticated user can have information about hidden users on subwikis through uorgsuggest.vmxwiki · xwiki-platform · CVSS 3.7 · 2023-04-15 | 3.7 | 0.7% | 2023-04-15 |
| CVE-2020-37173AVideo Platform 8.1 - Information Disclosure (User Enumeration)AVideo · AVideo Platform · CVSS 7.5 · 2026-02-11 | 7.5 | 0.7% | 2026-02-11 |
| CVE-2026-56171Windows Remote Desktop Protocol (RDP) Information Disclosure VulnerabilityMicrosoft · Remote Desktop Web Client · CVSS 7.1 · 2026-07-17 | 7.1 | 0.7% | 2026-07-17 |
| CVE-2019-25762Joomla! Component JoomProject 1.1.3.2 Information DisclosureJoomboost · JoomProject · CVSS 7.5 · 2026-06-19 | 7.5 | 0.7% | 2026-06-19 |
| CVE-2024-27850This issue was addressed with improvements to the noise injection algorithm. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, visionOS 1.2. A malic…Apple · Safari · CVSS 6.5 · 2024-06-10 | 6.5 | 0.7% | 2024-06-10 |
| CVE-2023-7014Author Box, Guest Author and Co-Authors for Your Posts – Molongui <= 4.7.4 - Information Exposure via ma_debugmolongui · Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress · CVSS 5.3 · 2024-02-05 | 5.3 | 0.7% | 2024-02-05 |
| CVE-2026-24735Apache Answer: Revision API Improper Access Control leads to Information DisclosureApache Software Foundation · Apache Answer · CVSS 7.5 · 2026-02-04 | 7.5 | 0.6% | 2026-02-04 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.