CWE-200— Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.— MITRE CWE catalog
9,080 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-200page 1 of 182
- CVE-1999-0059HIGHCVSS 7.3EG 7.31997-07-14
IRIX fam service allows an attacker to obtain a list of all files on the server.
- CVE-1999-0236HIGHCVSS 7.5EG 7.51997-01-01
ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.
- CVE-1999-0348MEDIUMCVSS v2 5.0EG 5.01999-01-27
IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory.
- CVE-1999-0372LOWCVSS v2 2.1EG 2.11999-02-12
The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted.
- CVE-1999-0453MEDIUMCVSS v2 5.0EG 5.01999-01-01
An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol (CDP).
- CVE-1999-0468HIGHCVSS 8.2EG 8.21999-04-09
Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component.
- CVE-1999-0511CRITICALCVSS 9.1EG 9.11997-01-01
IP forwarding is enabled on a machine which is not a router or firewall.
- CVE-1999-0517MEDIUMCVSS 5.9EG 5.91997-01-01
An SNMP community name is the default (e.g. public), null, or missing.
- CVE-1999-0524MEDIUMCVSS 4.0EG 4.11997-08-01
ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.
- CVE-1999-0605MEDIUMCVSS v2 5.0EG 5.01999-04-01
An incorrect configuration of the Order Form 1.0 shopping cart CGI program could disclose private information.
- CVE-1999-0606MEDIUMCVSS v2 5.0EG 5.01999-04-01
An incorrect configuration of the EZMall 2000 shopping cart CGI program "mall2000.cgi" could disclose private information.
- CVE-1999-0632HIGHCVSS 7.3EG 7.31999-01-01
The RPC portmapper service is running.
- CVE-1999-0877MEDIUMCVSS v2 4.3EG 4.31999-10-01
Internet Explorer 5 allows remote attackers to read files via an ExecCommand method called on an IFRAME.
- CVE-1999-1136MEDIUMCVSS v2 4.6EG 4.61998-07-30
Vulnerability in Predictive on HP-UX 11.0 and earlier, and MPE/iX 5.5 and earlier, allows attackers to compromise data transfer for Predictive messages (using e-mail or modem) between customer and Response Center Predictive systems.
- CVE-1999-1462MEDIUMCVSS v2 5.0EG 5.01999-12-31
Vulnerability in bb-hist.sh CGI History module in Big Brother 1.09b and 1.09c allows remote attackers to read portions of arbitrary files.
- CVE-2000-0132LOWCVSS v2 2.6EG 2.62000-01-31
Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function.
- CVE-2000-0368LOWCVSS v2 2.1EG 2.12001-03-12
Classic Cisco IOS 9.1 and later allows attackers with access to the login prompt to obtain portions of the command history of previous users, which may allow the attacker to access sensitive data.
- CVE-2000-0588MEDIUMCVSS v2 5.0EG 5.02000-06-26
SawMill 5.0.21 CGI program allows remote attackers to read the first line of arbitrary files by listing the file in the rfcf parameter, whose contents SawMill attempts to parse as configuration commands.
- CVE-2000-0649LOWCVSS v2 2.6EG 2.62000-07-13
IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authentication and has no realm defined.
- CVE-2000-0759MEDIUMCVSS v2 6.4EG 6.42000-10-20
Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path.
- CVE-2000-0876MEDIUMCVSS v2 5.0EG 5.02000-11-14
WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to obtain the full pathname of the server via a "%C" command, which generates an error message that includes the pathname.
- CVE-2001-1387LOWCVSS v2 2.1EG 2.12001-11-05
iptables-save in iptables before 1.2.4 records the "--reject-with icmp-host-prohibited" rule as "--reject-with tcp-reset," which causes iptables to generate different responses than specified by the administrator, possibly leading to an in…
- CVE-2002-0419MEDIUMCVSS v2 5.0EG 5.02002-08-12
Information leaks in IIS 4 through 5.1 allow remote attackers to obtain potentially sensitive information or more easily conduct brute force attacks via responses from the server in which (2) in certain configurations, the server IP addres…
- CVE-2002-0422LOWCVSS v2 2.6EG 2.62002-08-12
IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system (which may be obscured by NAT) via (1) a PROPFIND HTTP request with a blank Host header, which leaks the address in an HREF …
- CVE-2002-0596MEDIUMCVSS v2 5.0EG 5.02002-06-18
WebTrends Reporting Center 4.0d allows remote attackers to determine the real path of the web server via a GET request to get_od_toc.pl with an empty Profile parameter, which leaks the pathname in an error message.
- CVE-2002-0812MEDIUMCVSS v2 6.4EG 6.42002-08-12
Information leak in Compaq WL310, and the Orinoco Residential Gateway access point it is based on, uses a system identification string as a default SNMP read/write community string, which allows remote attackers to obtain and modify sensit…
- CVE-2002-1432MEDIUMCVSS v2 5.0EG 5.02003-04-11
MidiCart stores the midicart.mdb database file under the Web document root, which allows remote attackers to steal sensitive information by directly requesting the database.
- CVE-2002-1717MEDIUMCVSS v2 5.0EG 5.02002-12-31
Microsoft Internet Information Server (IIS) 5.1 allows remote attackers to view path information via a GET request to (1) /_vti_pvt/access.cnf, (2) /_vti_pvt/botinfs.cnf, (3) /_vti_pvt/bots.cnf, or (4) /_vti_pvt/linkinfo.cnf.
- CVE-2002-1718MEDIUMCVSS v2 5.0EG 5.02002-12-31
Microsoft Internet Information Server (IIS) 5.1 may allow remote attackers to view the contents of a Frontpage Server Extension (FPSE) file, as claimed using an HTTP request for colegal.htm that contains .. (dot dot) sequences.
- CVE-2002-2276MEDIUMCVSS v2 5.0EG 5.02002-12-31
Ultimate PHP Board (UPB) 1.0 allows remote attackers to view the physical path of the message board via a direct request to add.php, which leaks the path in an error message.
- CVE-2002-2288MEDIUMCVSS v2 5.0EG 5.02002-12-31
Mambo Site Server 4.0.11 allows remote attackers to obtain the physical path of the server via an HTTP request to index.php with a parameter that does not exist, which causes the path to be leaked in an error message.
- CVE-2002-2289MEDIUMCVSS v2 5.0EG 5.02002-12-31
soinfo.php in BadBlue 1.7.1 calls the phpinfo function, which allows remote attackers to gain sensitive information including ODBC passwords.
- CVE-2002-2317HIGHCVSS v2 7.8EG 7.82002-12-31
Memory leak in the (1) httpd, (2) nntpd, and (3) vpn driver in VelociRaptor 1.0 allows remote attackers to cause a denial of service (memory consumption) via an unknown method.
- CVE-2002-2342MEDIUMCVSS v2 5.0EG 5.02002-12-31
Bannermatic 1, 2, and 3 stores the (1) ban.log, (2) ban.bak, (3) ban.dat and (4) banmat.pwd data files under the web document root with insufficient access control, which allows attackers to obtain sensitive information via a direct reques…
- CVE-2002-2346MEDIUMCVSS v2 5.0EG 5.02002-12-31
phpBB 2.0 through 2.0.3 generates names for uploaded avatar files with the hex-encoded IP address of the client system, which allows remote attackers to obtain client IP addresses.
- CVE-2002-2349MEDIUMCVSS v2 5.0EG 5.02002-12-31
phpinfo.php in phpBBmod 1.3.3 executes the phpinfo function, which allows remote attackers to obtain sensitive environment information.
- CVE-2002-2369MEDIUMCVSS v2 5.0EG 5.02002-12-31
Perception LiteServe 2.0 allows remote attackers to read password protected files via a leading "/./" in a URL.
- CVE-2002-2380MEDIUMCVSS v2 6.4EG 6.42002-12-31
NetDSL ADSL Modem 800 with Microsoft Network firmware 5.5.11 allows remote attackers to gain access to configuration menus by sniffing undocumented usernames and passwords from network traffic.
- CVE-2002-2409LOWCVSS v2 3.5EG 3.52002-12-31
Photon microGUI in QNX Neutrino realtime operating system (RTOS) 6.1.0 and 6.2.0 allows attackers to read user clipboard information via a direct request to the 1.TEXT file in a directory whose name is a hex-encoded user ID.
- CVE-2002-2410MEDIUMCVSS v2 5.0EG 5.02002-12-31
openwebmail.pl in Open WebMail 1.7 and 1.71 reveals sensitive information in error messages and generates different responses whether a user exists or not, which allows remote attackers to identify valid usernames via brute force attacks a…
- CVE-2002-2435MEDIUMCVSS v2 4.3EG 4.32011-12-07
The Cascading Style Sheets (CSS) implementation in Microsoft Internet Explorer 8.0 and earlier does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a …
- CVE-2002-2436MEDIUMCVSS v2 4.3EG 4.32011-12-07
The Cascading Style Sheets (CSS) implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive informati…
- CVE-2003-0001MEDIUMCVSS v2 5.0EG 5.02003-01-17
Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Ethe…
- CVE-2003-0456MEDIUMCVSS v2 5.0EG 5.02003-08-18
VisNetic WebSite 3.5 allows remote attackers to obtain the full pathname of the server via a request containing a folder that does not exist, which leaks the pathname in an error message, as demonstrated using _vti_bin/fpcount.exe.
- CVE-2003-0904MEDIUMCVSS v2 6.0EG 6.02004-01-20
Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users to view mailboxes of other users when Kerberos has been disabled as an au…
- CVE-2003-1366LOWCVSS v2 3.3EG 3.32003-12-31
chpass in OpenBSD 2.0 through 3.2 allows local users to read portions of arbitrary files via a hard link attack on a temporary file used to store user database information.
- CVE-2003-1379MEDIUMCVSS v2 5.0EG 5.02003-12-31
clarkconnectd in ClarkConnect Linux 1.2 allows remote attackers to obtain sensitive information about the server via the characters (1) A, which reveals the date and time, (2) F, (3) M, which reveals 'ifconfig' information, (4) P, which li…
- CVE-2003-1398HIGHCVSS v2 9.3EG 9.32003-12-31
Cisco IOS 12.0 through 12.2, when IP routing is disabled, accepts false ICMP redirect messages, which allows remote attackers to cause a denial of service (network routing modification).
- CVE-2003-1404HIGHCVSS v2 7.5EG 7.52003-12-31
DotBr 0.1 stores config.inc with insufficient access control under the web document root, which allows remote attackers to obtain sensitive information such as SQL usernames and passwords.
- CVE-2003-1408MEDIUMCVSS v2 5.0EG 5.02003-12-31
Lotus Domino Server 5.0 and 6.0 allows remote attackers to read the source code for files via an HTTP request with a filename with a trailing dot.
Map vulnerabilities like CWE-200 to your infrastructure
EchelonGraph correlates every CVE — across CWE-200 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Start Free Scan →