Skip to content

CWE-612 · Information Disclosure

Improper Authorization of Index Containing Sensitive Information

9CVEs

9 CVEs with CWE-612 as their weakness

CVEs with CWE-612, Most likely exploited
CVE · most likely exploitedCVSSEPSSPublished
CVE-2022-35980OpenSearch vulnerable to Improper Authorization of Index Containing Sensitive Informationopensearch-project · security · CVSS 7.5 · 2022-08-127.51.2%2022-08-12
CVE-2024-49071Windows Defender Information Disclosure VulnerabilityMicrosoft · Microsoft Defender for Endpoint for Windows · CVSS 6.5 · 2024-12-126.51.1%2024-12-12
CVE-2024-25635IDOR Vulnerability: Allowing Organization Owner to view the other Organizations API KEY and USERSalfio-event · alf.io · CVSS 8.8 · 2024-02-198.80.7%2024-02-19
CVE-2023-4560Improper Authorization of Index Containing Sensitive Information in omeka/omeka-someka · omeka/omeka-s · CVSS 6.5 · 2023-08-286.50.7%2023-08-28
CVE-2022-22565Dell PowerScale OneFS, versions 9.0.0-9.3.0, contain an improper authorization of index containing sensitive information. An authenticated and privileged user could potentially ex…Dell · PowerScale OneFS · CVSS 4.7 · 2022-04-124.70.5%2022-04-12
CVE-2019-25605EquityPandit 1.0 Insecure Logging Information DisclosurePlay · EquityPandit · CVSS 7.5 · 2026-03-227.50.3%2026-03-22
CVE-2025-3654Petlibro Smart Pet Feeder Platform through 1.7.31 Information Disclosure via API endpointPetlibrio · Smart Pet Feeder Platform · CVSS 5.3 · 2026-01-035.30.3%2026-01-03
CVE-2025-3653Petlibro Smart Pet Feeder through 1.7.31 Platform Improper Access Control via API endpointPetlibrio · Smart Pet Feeder Platform · CVSS 7.3 · 2026-01-037.30.3%2026-01-03
CVE-2025-3660Petlibro Smart Pet Feeder Platform through 1.7.31 Broken Access Control via API endpointPetlibrio · Smart Pet Feeder Platform · CVSS 6.5 · 2026-01-036.50.2%2026-01-03

EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.

Updated AboutDevelopersSign in