CWE-213 · 33 records

Exposure of Sensitive Information Due to Incompatible Policies

CVEs in this class

33 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2020-1652No exploit	Junos Space: OpenNMS is accessible via port 9443opennms · opennms · CWE-213 Pre-auth	Critical9.8	—	0.7%	Jul 17, 2020
36Monitor	CVE-2023-3441No exploit	Exposure of Sensitive Information Due to Incompatible Policies in GitLabgitlab · gitlab · CWE-213	Critical9.1	—	0.5%	Oct 1, 2024
30Monitor	CVE-2019-1010283No exploit	Univention Corporate Server univention-directory-notifier 12.0.1-3 and earlier is affected by: CWE-213: Intentional Information Exposure.univention · univention corporate server · CWE-213 Pre-auth	High7.5	—	1.4%	Jul 17, 2019
30Monitor	CVE-2022-30350No exploit	Avanquest Software RAD PDF (PDFEscape Online) 3.19.2.2 is vulnerable to Information Leak / Disclosure.avanquest · pdfescape · CWE-213 Pre-auth	High7.5	—	0.7%	Mar 30, 2023
30Monitor	CVE-2023-6517No exploit	Seeing the SMS Verification Code in Mia Technology's Mia-Medmiateknoloji · mia-med · CWE-213 Pre-auth	High7.5	—	0.4%	Feb 8, 2024
30Monitor	CVE-2024-49354No exploit	IBM Concert information disclosureibm · concert · CWE-213 Pre-auth	High7.5	—	0.3%	Jan 18, 2025
30Monitor	CVE-2024-49827No exploit	IBM Concert Software information disclosureibm · concert · CWE-213 Pre-auth	High7.5	—	0.2%	Aug 18, 2025
28Monitor	CVE-2024-7267No exploit	Internal infrastructure data leak in EZD RPnask · ezd rp · CWE-213	High7.1	—	0.5%	Aug 7, 2024
27Monitor	CVE-2025-24316No exploit	Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Exposure of Sensitive Information Due to Incompatible Policiesdario health · dario application database and internet-based server infrastructure · CWE-213 Pre-auth	Medium6.9	—	0.3%	Feb 28, 2025
26Monitor	CVE-2025-54831No exploit	Apache Airflow: Connection sensitive details exposed to users with READ permissionsapache · airflow · CWE-213	Medium6.5	—	0.9%	Sep 26, 2025
26Monitor	CVE-2022-22541No exploit	SAP BusinessObjects Business Intelligence Platform - versions 420, 430, may allow legitimate users to access information they shouldn't see sap · businessobjects business intelligence platform · CWE-213	Medium6.5	—	0.7%	Apr 12, 2022
26Monitor	CVE-2026-6280No exploit	Improper Access Control in Nomysoft Informatics' Nomysemnomysoft informatics education and consulting inc. · nomysem · CWE-213	Medium6.5	—	0.3%	Jul 8, 2026
23Monitor	CVE-2019-10247No exploit	In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version eclipse · jetty · CWE-213 Pre-auth	Medium5.3	—	5.9%	Apr 22, 2019
23Monitor	CVE-2026-0893No exploit	Uncleared Password Keystrokes Vulnerabilityami · aptiov · CWE-213 Local privilege escalation	Medium5.8	—	0.1%	Oct 13, 2026
22Monitor	CVE-2019-10246No exploit	In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Reseclipse · jetty · CWE-213 Pre-auth	Medium5.3	—	4.0%	Apr 22, 2019
21Monitor	CVE-2017-3211No exploit	Centire Yopify leaks customer informationyopify · yopify · CWE-213 Pre-auth	Medium5.3	—	0.8%	Jan 15, 2020
21Monitor	CVE-2023-40570No exploit	Datasette 1.0 alpha series leaks names of databases and tables to unauthenticated usersdatasette · datasette · CWE-213 Pre-auth	Medium5.3	—	0.5%	Aug 24, 2023
21Monitor	CVE-2025-4976No exploit	Exposure of Sensitive Information Due to Incompatible Policies in GitLabgitlab · gitlab · CWE-213 Pre-auth	Medium5.3	—	0.4%	Jul 24, 2025
21Monitor	CVE-2023-36919No exploit	Information Disclosure in SAP Enable Nowsap · enable now · CWE-213 Pre-auth	Medium5.3	—	0.4%	Jul 10, 2023
20Monitor	CVE-2026-55425No exploit	Graylog: System Catalog titles endpoint can be used to retrieve values of protected database fieldsgraylog2 · graylog2-server · CWE-213	Medium5.0	—	0.4%	Aug 28, 2026
18Monitor	CVE-2023-27465No exploit	A vulnerability has been identified in SIMOTION C240 (All versions >= V5.4 < V5.5 SP1), SIMOTION C240 PN (All versions >= V5.4 < V5.5 SP1), siemens · simotion d425-2 dp firmware · CWE-213	Medium4.6	—	0.2%	Jun 13, 2023
17Monitor	CVE-2025-32791No exploit	Permission policy information leakage in Backstage permission systembackstage · backstage · CWE-213	Medium4.3	—	0.2%	Apr 16, 2025
17Monitor	CVE-2024-44121No exploit	Information Disclosure in SAP S/4 HANA (Statutory Reports)sap_se · sap s/4 hana (statutory reports) · CWE-213	Medium4.3	—	0.2%	Sep 10, 2024
14Monitor	CVE-2023-5117No exploit	Exposure of Sensitive Information Due to Incompatible Policies in GitLabgitlab · gitlab · CWE-213 Pre-auth Auth bypass	Low3.7	—	0.3%	Dec 25, 2024
14Monitor	CVE-2025-52603No exploit	HCL Connections is vulnerable to information disclosurehcltech · connections · CWE-213	Low3.5	—	0.3%	Feb 20, 2026

CVE-2020-1652
39Monitor
Junos Space: OpenNMS is accessible via port 9443
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
opennms · opennmsJul 17, 2020
CVE-2023-3441
36Monitor
Exposure of Sensitive Information Due to Incompatible Policies in GitLab
CriticalCVSS 9.1No exploitEPSS 0%
gitlab · gitlabOct 1, 2024
CVE-2019-1010283
30Monitor
Univention Corporate Server univention-directory-notifier 12.0.1-3 and earlier is affected by: CWE-213: Intentional Information Exposure.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
univention · univention corporate serverJul 17, 2019
CVE-2022-30350
30Monitor
Avanquest Software RAD PDF (PDFEscape Online) 3.19.2.2 is vulnerable to Information Leak / Disclosure.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
avanquest · pdfescapeMar 30, 2023
CVE-2023-6517
30Monitor
Seeing the SMS Verification Code in Mia Technology's Mia-Med
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
miateknoloji · mia-medFeb 8, 2024
CVE-2024-49354
30Monitor
IBM Concert information disclosure
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
ibm · concertJan 18, 2025
CVE-2024-49827
30Monitor
IBM Concert Software information disclosure
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
ibm · concertAug 18, 2025
CVE-2024-7267
28Monitor
Internal infrastructure data leak in EZD RP
HighCVSS 7.1No exploitEPSS 0%
nask · ezd rpAug 7, 2024
CVE-2025-24316
27Monitor
Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Exposure of Sensitive Information Due to Incompatible Policies
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
dario health · dario application database and internet-based server infrastructureFeb 28, 2025
CVE-2025-54831
26Monitor
Apache Airflow: Connection sensitive details exposed to users with READ permissions
MediumCVSS 6.5No exploitEPSS 0%
apache · airflowSep 26, 2025
CVE-2022-22541
26Monitor
SAP BusinessObjects Business Intelligence Platform - versions 420, 430, may allow legitimate users to access information they shouldn't see
MediumCVSS 6.5No exploitEPSS 0%
sap · businessobjects business intelligence platformApr 12, 2022
CVE-2026-6280
26Monitor
Improper Access Control in Nomysoft Informatics' Nomysem
MediumCVSS 6.5No exploitEPSS 0%
nomysoft informatics education and consulting inc. · nomysemJul 8, 2026
CVE-2019-10247
23Monitor
In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version
MediumCVSS 5.3No exploitEPSS 5%
- Pre-auth
eclipse · jettyApr 22, 2019
CVE-2026-0893
23Monitor
Uncleared Password Keystrokes Vulnerability
MediumCVSS 5.8No exploitEPSS 0%
- Local privilege escalation
ami · aptiovOct 13, 2026
CVE-2019-10246
22Monitor
In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Res
MediumCVSS 5.3No exploitEPSS 4%
- Pre-auth
eclipse · jettyApr 22, 2019
CVE-2017-3211
21Monitor
Centire Yopify leaks customer information
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
yopify · yopifyJan 15, 2020
CVE-2023-40570
21Monitor
Datasette 1.0 alpha series leaks names of databases and tables to unauthenticated users
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
datasette · datasetteAug 24, 2023
CVE-2025-4976
21Monitor
Exposure of Sensitive Information Due to Incompatible Policies in GitLab
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
gitlab · gitlabJul 24, 2025
CVE-2023-36919
21Monitor
Information Disclosure in SAP Enable Now
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
sap · enable nowJul 10, 2023
CVE-2026-55425
20Monitor
Graylog: System Catalog titles endpoint can be used to retrieve values of protected database fields
MediumCVSS 5.0No exploitEPSS 0%
graylog2 · graylog2-serverAug 28, 2026
CVE-2023-27465
18Monitor
A vulnerability has been identified in SIMOTION C240 (All versions >= V5.4 < V5.5 SP1), SIMOTION C240 PN (All versions >= V5.4 < V5.5 SP1),
MediumCVSS 4.6No exploitEPSS 0%
siemens · simotion d425-2 dp firmwareJun 13, 2023
CVE-2025-32791
17Monitor
Permission policy information leakage in Backstage permission system
MediumCVSS 4.3No exploitEPSS 0%
backstage · backstageApr 16, 2025
CVE-2024-44121
17Monitor
Information Disclosure in SAP S/4 HANA (Statutory Reports)
MediumCVSS 4.3No exploitEPSS 0%
sap_se · sap s/4 hana (statutory reports)Sep 10, 2024
CVE-2023-5117
14Monitor
Exposure of Sensitive Information Due to Incompatible Policies in GitLab
LowCVSS 3.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
gitlab · gitlabDec 25, 2024
CVE-2025-52603
14Monitor
HCL Connections is vulnerable to information disclosure
LowCVSS 3.5No exploitEPSS 0%
hcltech · connectionsFeb 20, 2026

All vulnerability classes