Vulnerabilities > Response Discrepancy Information Exposure

DATE CVE VULNERABILITY TITLE RISK
2025-02-11 CVE-2025-23193 SAP NetWeaver Server ABAP allows an unauthenticated attacker to exploit a vulnerability that causes the server to respond differently based on the existence of a specified user, potentially revealing sensitive information.
network
low complexity
CWE-204
5.3
5.3
2025-01-29 CVE-2023-37413 IBM Aspera Faspex 5.0.0 through 5.0.10 could disclose sensitive username information due to an observable response discrepancy.
network
low complexity
CWE-204
5.3
5.3
2025-01-27 CVE-2023-47159 IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to enumerate usernames due to an observable discrepancy in request responses.
network
low complexity
CWE-204
4.3
4.3
2025-01-25 CVE-2024-35114 IBM Control Center 6.2.1 and 6.3.1 could allow a remote attacker to enumerate usernames due to an observable discrepancy between login attempts.
network
low complexity
CWE-204
5.3
5.3