Vulnerabilities > Information Exposure Through an Error Message

DATE CVE VULNERABILITY TITLE RISK
2022-03-10 CVE-2021-35251 Information Exposure Through an Error Message vulnerability in Solarwinds web Help Desk
Sensitive information could be displayed when a detailed technical error message is posted.
network
low complexity
solarwinds CWE-209
5.3
2022-03-04 CVE-2021-46353 Information Exposure Through an Error Message vulnerability in Dlink Dir-X1860 Firmware 1.03
An information disclosure in web interface in D-Link DIR-X1860 before 1.03 RevA1 allows a remote unauthenticated attacker to send a specially crafted HTTP request and gain knowledge of different absolute paths that are being used by the web application.
network
low complexity
dlink CWE-209
5.3
2022-02-21 CVE-2022-0563 Information Exposure Through an Error Message vulnerability in multiple products
A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support.
local
low complexity
kernel netapp CWE-209
5.5
2022-01-28 CVE-2021-40338 Information Exposure Through an Error Message vulnerability in Hitachi Linkone
Hitachi Energy LinkOne product, has a vulnerability due to a web server misconfiguration, that enables debug mode and reveals the full path of the filesystem directory when an attacker generates errors during a query operation.
network
low complexity
hitachi CWE-209
5.3
2022-01-10 CVE-2021-38894 Information Exposure Through an Error Message vulnerability in IBM Security Verify Access 10.0.0/10.0.1.0/10.0.2.0
IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.
network
low complexity
ibm CWE-209
2.7
2021-12-13 CVE-2021-44155 Information Exposure Through an Error Message vulnerability in Reprisesoftware Reprise License Manager 14.2
An issue was discovered in /goform/login_process in Reprise RLM 14.2.
network
low complexity
reprisesoftware CWE-209
5.3
2021-12-08 CVE-2021-43542 Information Exposure Through an Error Message vulnerability in multiple products
Using XMLHttpRequest, an attacker could have identified installed applications by probing error messages for loading external protocols.
network
low complexity
mozilla debian CWE-209
6.5
2021-11-23 CVE-2021-38980 Information Exposure Through an Error Message vulnerability in IBM products
IBM Tivoli Key Lifecycle Manager (IBM Security Guardium Key Lifecycle Manager) 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.
network
low complexity
ibm CWE-209
5.3
2021-11-15 CVE-2021-38981 Information Exposure Through an Error Message vulnerability in IBM products
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.
network
low complexity
ibm CWE-209
5.3
2021-11-04 CVE-2021-40126 Information Exposure Through an Error Message vulnerability in Cisco Umbrella
A vulnerability in the web-based dashboard of Cisco Umbrella could allow an authenticated, remote attacker to perform an email enumeration attack against the Umbrella infrastructure.
network
low complexity
cisco CWE-209
4.3