CWE-528 · Information Disclosure
Exposure of Core Dump File to an Unauthorized Control Sphere
2CVEs
SortMost likely exploited
2 CVEs with CWE-528 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2025-48928In CISA KEVExploitedThe TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password previously sent over…TeleMessage · service · CVSS 4 · 2025-05-28 | 4.0 | 0.6% | 2025-05-28 |
| CVE-2024-10403SFTP/FTP password could be captured in plain text in Supportsave generated from SANnavBrocade · Fabric OS · CVSS 5.9 · 2024-11-21 | 5.9 | 0.7% | 2024-11-21 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.