CWE-497 · Information Disclosure
Exposure of Sensitive System Information to an Unauthorized Control Sphere
453CVEs
1exploited
4with a public check
2likely (EPSS 10%+)
SortMost likely exploited
453 CVEs with CWE-497 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2021-31955In CISA KEVExploitedWindows Kernel Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 5.5 · 2021-06-08 | 5.5 | 81% | 2021-06-08 |
| CVE-2026-34413CheckXerte Online Toolkits <= 3.15 - Remote Code Executionthexerteproject · xerteonlinetoolkits · CVSS 8.6 · 2026-04-22 | 8.6 | 3.1% | 2026-04-22 |
| CVE-2024-31223CheckFides Privacy Center ≤ 2.39.1 - Server-Side URL Disclosureethyca · fides · CVSS 5.3 · 2024-07-03 | 5.3 | 1.1% | 2024-07-03 |
| CVE-2025-53364CheckParse Server - GraphQL Schema Information Disclosureparse-community · parse-server · CVSS 5.3 · 2025-07-10 | 5.3 | 1.0% | 2025-07-10 |
| CVE-2025-59582CheckAjax Load More < 7.6.1 - Unauthenticated Sensitive Information ExposureDarren Cooney · Ajax Load More · CVSS 5.3 · 2025-09-22 | 5.3 | 0.7% | 2025-09-22 |
| CVE-2025-44823Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagioslogserver/index.php/api/system/get_users call. This is GL…Nagios · Log Server · CVSS 9.9 · 2025-10-07 | 9.9 | 17% | 2025-10-07 |
| CVE-2026-7864Exposure of Sensitive Information to an Unauthorized ActorSEPPmail AG · Secure Email Gateway · CVSS 6.9 · 2026-05-08 | 6.9 | 16% | 2026-05-08 |
| CVE-2024-13999Nagios XI < 2024R1.1.3 AD/LDAP Token Authenticated Information DisclosureNagios · XI · CVSS 7.3 · 2025-10-30 | 7.3 | 1.9% | 2025-10-30 |
| CVE-2024-5735Full Path Disclosure in AdmirorFrames Joomla! ExtensionNikola Vasilijevski · AdmirorFrames · CVSS 6.3 · 2024-06-28 | 6.3 | 1.5% | 2024-06-28 |
| CVE-2020-25179GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network.Gehealthcare · GE Healthcare Imaging and Ultrasound Products · 2020-12-14 | – | 1.5% | 2020-12-14 |
| CVE-2022-1902A flaw was found in the Red Hat Advanced Cluster Security for Kubernetes. Notifier secrets were not properly sanitized in the GraphQL API. This flaw allows authenticated ACS users…Redhat · Red Hat Advanced Cluster Security for Kubernetes · 2022-09-01 | – | 1.4% | 2022-09-01 |
| CVE-2019-10243In Eclipse Kura versions up to 4.0.0, Kura exposes the underlying Ui Web server version in its replies. This can be used as a hint by an attacker to specifically craft attacks to…The Eclipse Foundation · Eclipse Kura · 2019-04-09 | – | 1.3% | 2019-04-09 |
| CVE-2020-26076Cisco IoT Field Network Director Information Disclosure VulnerabilityCisco · Cisco IoT Field Network Director (IoT-FND) · CVSS 5.3 · 2020-11-18 | 5.3 | 1.3% | 2020-11-18 |
| CVE-2024-13995Nagios XI < 2024R1.1.2 API Keys & Hashed Passwords Authenticated Information DisclosureNagios · XI · CVSS 7.1 · 2025-10-30 | 7.1 | 1.3% | 2025-10-30 |
| CVE-2021-1535Cisco SD-WAN vManage Information Disclosure VulnerabilityCisco · Cisco SD-WAN vManage · CVSS 5.3 · 2021-05-06 | 5.3 | 1.2% | 2021-05-06 |
| CVE-2022-20664Cisco Email Security Appliance and Cisco Secure Email and Web Manager Information Disclosure VulnerabilityCisco · Cisco Email Security Appliance (ESA) · CVSS 7.7 · 2022-06-15 | 7.7 | 1.1% | 2022-06-15 |
| CVE-2025-34283Nagios XI < 2024R1.4.2 API Key Disclosure via Neptune ThemesNagios · XI · CVSS 7.1 · 2025-10-30 | 7.1 | 1.0% | 2025-10-30 |
| CVE-2024-13998Nagios XI < 2024R1.1.3 API Keys & Hashed Passwords Authenticated Information DisclosureNagios · XI · CVSS 6 · 2025-11-03 | 6.0 | 1.0% | 2025-11-03 |
| CVE-2026-71330Windows Services for NFS ONCRPC XDR Driver Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 7.5 · 2026-09-08 | 7.5 | 1.0% | 2026-09-08 |
| CVE-2021-0291Junos OS and Junos OS Evolved: A vulnerability allows a network based unauthenticated attacker which sends a high rate of specific traffic to cause a partial Denial of ServiceJuniper Networks · Junos OS · CVSS 6.5 · 2021-07-15 | 6.5 | 1.0% | 2021-07-15 |
| CVE-2026-112808Windows Print Spooler Components Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 6.5 · 2026-11-10 | 6.5 | 1.0% | 2026-11-10 |
| CVE-2026-112757Windows Secure Kernel Mode Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 6 · 2026-11-10 | 6.0 | 1.0% | 2026-11-10 |
| CVE-2026-83907Windows Hello Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 21H2 · CVSS 5.5 · 2026-10-13 | 5.5 | 0.9% | 2026-10-13 |
| CVE-2026-83773Windows MIDI Service Module Information Disclosure VulnerabilityMicrosoft · Windows 11 Version 24H2 · CVSS 5.5 · 2026-10-13 | 5.5 | 0.9% | 2026-10-13 |
| CVE-2026-83713Windows Universal Disk Format File System Driver (UDFS) Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 5.5 · 2026-10-13 | 5.5 | 0.9% | 2026-10-13 |
| CVE-2026-70261Microsoft Trace Data Helper Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 5.5 · 2026-10-13 | 5.5 | 0.9% | 2026-10-13 |
| CVE-2026-70260Microsoft Trace Data Helper Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 5.5 · 2026-10-13 | 5.5 | 0.9% | 2026-10-13 |
| CVE-2026-70232Windows Kernel Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 5.5 · 2026-10-13 | 5.5 | 0.9% | 2026-10-13 |
| CVE-2026-70199Windows Kernel Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 5.5 · 2026-10-13 | 5.5 | 0.9% | 2026-10-13 |
| CVE-2026-70055Windows Cryptographic Services Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 5.5 · 2026-10-13 | 5.5 | 0.9% | 2026-10-13 |
| CVE-2026-69644Windows iSCSI Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 5.5 · 2026-10-13 | 5.5 | 0.9% | 2026-10-13 |
| CVE-2021-0260Junos OS: SNMP fails to properly perform authorization checks on incoming received SNMP requests.Juniper Networks · Junos OS · CVSS 7.3 · 2021-04-22 | 7.3 | 0.9% | 2021-04-22 |
| CVE-2026-83705HTTP.sys Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 5.5 · 2026-10-13 | 5.5 | 0.9% | 2026-10-13 |
| CVE-2026-69723Windows Kernel Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 5.7 · 2026-09-08 | 5.7 | 0.9% | 2026-09-08 |
| CVE-2026-108462Windows Kernel Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 5.5 · 2026-10-13 | 5.5 | 0.9% | 2026-10-13 |
| CVE-2023-0342MongoDB Ops Manager may disclose sensitive information in Diagnostic ArchiveMongoDB Inc. · MongoDB Ops Manager · CVSS 3.1 · 2023-06-09 | 3.1 | 0.9% | 2023-06-09 |
| CVE-2026-97740Microsoft Office Excel Information Disclosure VulnerabilityMicrosoft · Microsoft 365 Apps for Enterprise · CVSS 6.5 · 2026-10-13 | 6.5 | 0.9% | 2026-10-13 |
| CVE-2025-34442AVideo < 20.1 System Path Disclosure via Public APIWorld Wide Broadcast Network · AVideo · CVSS 6.9 · 2025-12-17 | 6.9 | 0.9% | 2025-12-17 |
| CVE-2026-105557Windows DHCP Server Information Disclosure VulnerabilityMicrosoft · Windows Server 2016 · CVSS 5.9 · 2026-11-10 | 5.9 | 0.8% | 2026-11-10 |
| CVE-2026-118140Server for NFS Information Disclosure VulnerabilityMicrosoft · Windows Server 2016 · CVSS 5.5 · 2026-11-10 | 5.5 | 0.8% | 2026-11-10 |
| CVE-2026-119882Windows Remote Desktop Services Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 5.3 · 2026-11-10 | 5.3 | 0.8% | 2026-11-10 |
| CVE-2026-41459Xerte Online Toolkits Path Disclosure via /setupthexerteproject · xerteonlinetoolkits · CVSS 5.3 · 2026-04-22 | 5.3 | 0.8% | 2026-04-22 |
| CVE-2021-1234Cisco SD-WAN vManage Information Disclosure VulnerabilitiesCisco · Cisco Catalyst SD-WAN Manager · CVSS 5.3 · 2024-11-18 | 5.3 | 0.8% | 2024-11-18 |
| CVE-2024-25634IDOR make user can read e-mail log sent by other eventsalfio-event · alf.io · CVSS 7.2 · 2024-02-19 | 7.2 | 0.7% | 2024-02-19 |
| CVE-2023-20111A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to access sensitive information. This v…Cisco · Cisco Identity Services Engine Software · CVSS 6.5 · 2023-08-16 | 6.5 | 0.7% | 2023-08-16 |
| CVE-2026-83905Windows Shell Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 4.7 · 2026-10-13 | 4.7 | 0.7% | 2026-10-13 |
| CVE-2026-83774Windows Win32 Kernel Subsystem Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 4.7 · 2026-10-13 | 4.7 | 0.7% | 2026-10-13 |
| CVE-2026-83672Windows Installer Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 4.7 · 2026-10-13 | 4.7 | 0.7% | 2026-10-13 |
| CVE-2026-69127Kirby: System path exposure from error messages in the REST APIgetkirby · kirby · CVSS 6.9 · 2026-08-07 | 6.9 | 0.7% | 2026-08-07 |
| CVE-2026-14808PROG MIS｜Prog Management System - Exposure of Sensitive InformationPROG MIS · Prog Management System · CVSS 9.8 · 2026-07-06 | 9.8 | 0.7% | 2026-07-06 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.