CWE-200: Information Exposure Vulnerabilities

CVE-2016-6102

IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, re

IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, re...

3/27/2017CWE-200

CVE-1999-0606

NONE

An incorrect configuration of the EZMall 2000 shopping cart CGI program "mall2000.cgi" could disclose private information.

4/1/1999CWE-200

CVE-2008-0136

NONE

Snitz Forums 2000 3.4.05 allows remote attackers to obtain sensitive information via a direct request to forum/whereami.asp, which reveals the database path.

1/8/2008CWE-200

CVE-2003-20001

5.6MEDIUM

An issue was discovered on Mitel ICP VoIP 3100 devices. When a remote user attempts to log in via TELNET during the login wait time and an external call comes in, the system incorrectly divulges infor

An issue was discovered on Mitel ICP VoIP 3100 devices. When a remote user attempts to log in via TELNET during the login wait time and an external call comes in, the system incorrectly divulges infor...

4/1/2025CWE-200

CVE-2000-0132

NONE

Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function.

1/31/2000CWE-200

CVE-2008-1181

NONE

Juniper Networks Secure Access 2000 5.5 R1 (build 11711) allows remote attackers to obtain sensitive information via a direct request for remediate.cgi without certain parameters, which reveals the pa

Juniper Networks Secure Access 2000 5.5 R1 (build 11711) allows remote attackers to obtain sensitive information via a direct request for remediate.cgi without certain parameters, which reveals the pa...

3/6/2008CWE-200

CVE-2007-6043

NONE

The CryptGenRandom function in Microsoft Windows 2000 generates predictable values, which makes it easier for context-dependent attackers to reduce the effectiveness of cryptographic mechanisms, as de

The CryptGenRandom function in Microsoft Windows 2000 generates predictable values, which makes it easier for context-dependent attackers to reduce the effectiveness of cryptographic mechanisms, as de...

11/20/2007CWE-200

CVE-2021-3031

4.3MEDIUM

Padding bytes in Ethernet packets on PA-200, PA-220, PA-500, PA-800, PA-2000 Series, PA-3000 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series firewalls are not cleared before the data frame

Padding bytes in Ethernet packets on PA-200, PA-220, PA-500, PA-800, PA-2000 Series, PA-3000 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series firewalls are not cleared before the data frame ...

1/13/2021CWE-200, CWE-212

CVE-1999-0372

NONE

The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted.

2/12/1999CWE-200

CVE-2008-5112

NONE

The LDAP server in Active Directory in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 responds differently to a failed bind attempt depending on whether the user account exists and is permitte

The LDAP server in Active Directory in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 responds differently to a failed bind attempt depending on whether the user account exists and is permitte...

11/17/2008CWE-200

CVE-2014-2000

NONE

The NTT 050 plus application before 4.2.1 for Android allows attackers to obtain sensitive information by leveraging the ability to read system log files.

6/18/2014CWE-200

CVE-2008-0085

NONE

SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine (WMSDE); Microsoft Data Engine (MSDE) 1.0 SP4; and Intern

SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine (WMSDE); Microsoft Data Engine (MSDE) 1.0 SP4; and Intern...

7/8/2008CWE-200

CVE-2010-0025

NONE

The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2000 SP3, does not properly allocate memory for SMTP command r

The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2000 SP3, does not properly allocate memory for SMTP command r...

4/14/2010CWE-200

CVE-2003-0001

NONE

Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using mal

Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using mal...

1/17/2003CWE-200

CVE-2023-42490

7.5HIGH

EisBaer Scada - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

10/25/2023CWE-200, CWE-200

CVE-2010-4562

NONE

Microsoft Windows 2008, 7, Vista, 2003, 2000, and XP, when using IPv6, allows remote attackers to determine whether a host is sniffing the network by sending an ICMPv6 Echo Request to a multicast addr

Microsoft Windows 2008, 7, Vista, 2003, 2000, and XP, when using IPv6, allows remote attackers to determine whether a host is sniffing the network by sending an ICMPv6 Echo Request to a multicast addr...

2/2/2012CWE-200

CVE-2000-0368

NONE

Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow the attacker to access sensitive data.

3/12/2001CWE-200

CVE-2000-0588

NONE

SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whose contents SawMill attempts to parse as configuration comman

SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whose contents SawMill attempts to parse as configuration comman...

6/26/2000CWE-200

Insufficiently Protected Credentials in the AD/LDAP server settings in 1C-Bitrix Bitrix24 through 22.200.200 allow remote administrators to discover an AD/LDAP administrative password by reading the s

Insufficiently Protected Credentials in the AD/LDAP server settings in 1C-Bitrix Bitrix24 through 22.200.200 allow remote administrators to discover an AD/LDAP administrative password by reading the s...

1/20/2023CWE-200, CWE-200

CVE-2009-0229

NONE

The Windows Printing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows local users to read arbitrary files via a crafted sepa

The Windows Printing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows local users to read arbitrary files via a crafted sepa...

6/10/2009CWE-200

CVE-2007-0042

NONE

Interpretation conflict in ASP.NET in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to access configuration files and obtain sensitive

Interpretation conflict in ASP.NET in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to access configuration files and obtain sensitive...

7/10/2007CWE-200

CVE-2024-47923

5.3MEDIUM

Mashov – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

12/30/2024CWE-200

CVE-2024-47922

7.5HIGH

Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

12/30/2024CWE-200

CVE-2024-47915

7.5HIGH

VaeMendis - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

11/14/2024CWE-200

CVE-2024-45250

4.3MEDIUM

ZKteco – CWE 200 Exposure of Sensitive Information to an Unauthorized Actor

10/6/2024CWE-200

CVE-2024-41701

5.3MEDIUM

AccuPOS - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

7/30/2024CWE-200

CVE-2024-41694

5.3MEDIUM

Cybonet - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

7/30/2024CWE-200

CVE-2024-45245

7.8HIGH

Diebold Nixdorf – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

10/6/2024CWE-200

CVE-2024-42339

4.3MEDIUM

CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

8/25/2024CWE-200

CVE-2024-42338

4.3MEDIUM

CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

8/25/2024CWE-200

CVE-2024-42337

4.3MEDIUM

CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

8/25/2024CWE-200

CVE-2018-15357

6.5MEDIUM

An authenticated attacker with low privileges can extract password hash information for all users in Eltex ESP-200 firmware version 1.2.0.

8/17/2018CWE-200

CVE-2024-41698

4.3MEDIUM

Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

8/20/2024CWE-200

CWE-200

Information Exposure

CVE-2016-6102

IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, re

CVE-1999-0606

An incorrect configuration of the EZMall 2000 shopping cart CGI program "mall2000.cgi" could disclose private information.

CVE-2008-0136

Snitz Forums 2000 3.4.05 allows remote attackers to obtain sensitive information via a direct request to forum/whereami.asp, which reveals the database path.

CVE-2003-20001

An issue was discovered on Mitel ICP VoIP 3100 devices. When a remote user attempts to log in via TELNET during the login wait time and an external call comes in, the system incorrectly divulges infor

CVE-2000-0132

Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function.

CVE-2008-1181

Juniper Networks Secure Access 2000 5.5 R1 (build 11711) allows remote attackers to obtain sensitive information via a direct request for remediate.cgi without certain parameters, which reveals the pa

CVE-2007-6043

The CryptGenRandom function in Microsoft Windows 2000 generates predictable values, which makes it easier for context-dependent attackers to reduce the effectiveness of cryptographic mechanisms, as de

CVE-2021-3031

Padding bytes in Ethernet packets on PA-200, PA-220, PA-500, PA-800, PA-2000 Series, PA-3000 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series firewalls are not cleared before the data frame

CVE-1999-0372

The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted.

CVE-2008-5112

The LDAP server in Active Directory in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 responds differently to a failed bind attempt depending on whether the user account exists and is permitte

CVE-2014-2000

The NTT 050 plus application before 4.2.1 for Android allows attackers to obtain sensitive information by leveraging the ability to read system log files.

CVE-2008-0085

SQL Server 7.0 SP4, 2000 SP4, 2005 SP1 and SP2, 2000 Desktop Engine (MSDE 2000) SP4, 2005 Express Edition SP1 and SP2, and 2000 Desktop Engine (WMSDE); Microsoft Data Engine (MSDE) 1.0 SP4; and Intern

CVE-2010-0025

The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2000 SP3, does not properly allocate memory for SMTP command r

CVE-2003-0001

Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using mal

CVE-2023-42490

EisBaer Scada - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CVE-2010-4562

Microsoft Windows 2008, 7, Vista, 2003, 2000, and XP, when using IPv6, allows remote attackers to determine whether a host is sniffing the network by sending an ICMPv6 Echo Request to a multicast addr

CVE-2000-0368

Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow the attacker to access sensitive data.

CVE-2000-0588

SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whose contents SawMill attempts to parse as configuration comman

CVE-2025-55052

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

CVE-2025-46388

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

CVE-2025-46382

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

CVE-2025-23174

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CVE-2022-43959

Insufficiently Protected Credentials in the AD/LDAP server settings in 1C-Bitrix Bitrix24 through 22.200.200 allow remote administrators to discover an AD/LDAP administrative password by reading the s

CVE-2009-0229

The Windows Printing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows local users to read arbitrary files via a crafted sepa

CVE-2007-0042

Interpretation conflict in ASP.NET in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to access configuration files and obtain sensitive

CVE-2024-47923

Mashov – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CVE-2024-47922

Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CVE-2024-47915

VaeMendis - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CVE-2024-45250

ZKteco – CWE 200 Exposure of Sensitive Information to an Unauthorized Actor

CVE-2024-41701

AccuPOS - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CVE-2024-41694

Cybonet - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CVE-2024-45245

Diebold Nixdorf – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CVE-2024-42339

CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CVE-2024-42338

CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CVE-2024-42337

CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CVE-2018-15357

An authenticated attacker with low privileges can extract password hash information for all users in Eltex ESP-200 firmware version 1.2.0.

CVE-2024-41698

Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor