CWE-550 · Information Disclosure
Server-generated Error Message Containing Sensitive Information
5CVEs
SortMost likely exploited
5 CVEs with CWE-550 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2025-62168CheckSquid Proxy - HTTP Authentication Credentials Disclosuresquid-cache · squid · CVSS 10 · 2025-10-17 | 10.0 | 62% | 2025-10-17 |
| CVE-2023-40726A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application server responds with sensitive information about the server. This could all…Siemens · QMS Automotive · CVSS 8.8 · 2023-09-12 | 8.8 | 0.7% | 2023-09-12 |
| CVE-2023-5617Hitachi Vantara Pentaho Data Integration & Analytics - Server-generated Error Message Containing Sensitive InformationHitachi Vantara · Pentaho Data Integration & Analytics · CVSS 5.3 · 2024-02-28 | 5.3 | 0.4% | 2024-02-28 |
| CVE-2026-101915@grpc/grpc-js: The server transmits some error messages thrown by method handlers to the client in status messagesgrpc · grpc-node · CVSS 3.7 · 2026-09-28 | 3.7 | 0.3% | 2026-09-28 |
| CVE-2025-36419Multiple vulnerabilities found in IBM ApplinX.IBM · ApplinX · CVSS 5.3 · 2026-01-20 | 5.3 | 0.2% | 2026-01-20 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.