CWE-497— Exposure of Sensitive System Information to an Unauthorized Control Sphere
The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.— MITRE CWE catalog
472 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-497page 8 of 10
- CVE-2019-10243MEDIUMCVSS 5.3EG 5.32019-04-09
In Eclipse Kura versions up to 4.0.0, Kura exposes the underlying Ui Web server version in its replies. This can be used as a hint by an attacker to specifically craft attacks to the web server run by Kura.
- CVE-2026-0887MEDIUMCVSS 4.3EG 5.32026-01-13
Clickjacking issue, information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.
- CVE-2024-41781MEDIUMCVSS 5.1EG 5.12024-11-22
IBM PowerVM Platform KeyStore (IBM PowerVM Hypervisor FW950.00 through FW950.90, FW1030.00 through FW1030.60, FW1050.00 through FW1050.20, and FW1060.00 through FW1060.10 functionality can be compromised if an attacker gains service acc…
- CVE-2025-48024MEDIUMCVSS 5.0EG 5.02025-05-15
In BlueWave Checkmate before 2.1, an authenticated regular user can access sensitive application secrets via the /api/v1/settings endpoint.
- CVE-2023-34209MEDIUMCVSS 5.0EG 5.02023-10-17
Exposure of Sensitive System Information to an Unauthorized Control Sphere in create template function in EasyUse MailHunter Ultimate 2023 and earlier allow remote authenticated users to obtain the absolute path via unencrypted VIEWSTATE p…
- CVE-2025-59575MEDIUMCVSS 4.9EG 5.02025-10-22
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Stylemix MasterStudy LMS masterstudy-lms-learning-management-system allows Retrieve Embedded Sensitive Data.This issue affects MasterStudy LMS: fro…
- CVE-2026-16072MEDIUMCVSS 4.9EG 4.92026-07-17
A flaw was found in the organization management component of Keycloak. A delegated administrator with permission to manage organizations can create an invitation for a non-existent email address and then retrieve the secret registration li…
- CVE-2025-2667MEDIUMCVSS 4.9EG 4.92025-09-04
IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.7_1 and 6.2.0.0 through 6.2.0.4 and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7_1 and 6.2.0.0 through 6.2.0.4 could disclose sensitive system information about the server to a privile…
- CVE-2023-0005MEDIUMCVSS 4.1EG 4.92023-04-12
A vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to expose the plaintext values of secrets stored in the device configuration and encrypted API keys.
- CVE-2025-59178MEDIUMCVSS 4.8EG 4.82026-07-27
Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain an Exposure of Sensitive System Information vulnerability in Configuration Management allowing an attacker to enumerate other users on the system.
- CVE-2025-8700MEDIUMCVSS 4.8EG 4.82025-08-26
Invoice Ninja's configuration on macOS, specifically the presence of entitlement "com.apple.security.get-task-allow", allows local attackers with unprivileged access (e.g. via a malicious application) to attach a debugger, read or modify t…
- CVE-2025-8597MEDIUMCVSS 4.8EG 4.82025-08-26
MacVim's configuration on macOS, specifically the presence of entitlement "com.apple.security.get-task-allow", allows local attackers with unprivileged access (e.g. via a malicious application) to attach a debugger, read or modify the proc…
- CVE-2024-12993MEDIUMCVSS 4.8EG 4.82024-12-30
Infinix devices contain a pre-loaded "com.rlk.weathers" application, that exposes an unsecured content provider. An attacker can communicate with the provider and reveal the user’s location without any privileges. After multiple attemp…
- CVE-2026-119942MEDIUMCVSS 4.7EG 4.72026-11-10
Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally.
- CVE-2026-85866MEDIUMCVSS 4.7EG 4.72026-10-13
Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally.
- CVE-2026-83925MEDIUMCVSS 4.7EG 4.72026-10-13
Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.
- CVE-2026-83905MEDIUMCVSS 4.7EG 4.72026-10-13
Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.
- CVE-2026-83897MEDIUMCVSS 4.7EG 4.72026-10-13
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-83774MEDIUMCVSS 4.7EG 4.72026-10-13
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2026-83672MEDIUMCVSS 4.7EG 4.72026-10-13
Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information locally.
- CVE-2026-83909MEDIUMCVSS 4.7EG 4.72026-10-13
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
- CVE-2024-52582MEDIUMCVSS 4.7EG 4.72024-11-19
Cachi2 is a command-line interface tool that pre-fetches a project's dependencies to aid in making the project's build process network-isolated. Prior to version 0.14.0, secrets may be shown in logs when an unhandled exception is triggered…
- CVE-2026-10588MEDIUMCVSS 4.4EG 4.42026-07-16
A potential vulnerability could allow a local privileged attacker to disclose the address of protected System Management Mode memory.
- CVE-2025-6390MEDIUMCVSS 4.4EG 4.42025-07-10
Brocade SANnav before SANnav 2.4.0a logs passwords and pbe keys in the Brocade SANnav server audit logs after installation and under specific conditions. These audit logs are the local server VM’s audit logs and are not controlled by SAN…
- CVE-2025-4662MEDIUMCVSS 4.4EG 4.42025-07-10
Brocade SANnav before SANnav 2.4.0a logs plaintext passphrases in the Brocade SANnav host server audit logs while executing OpenSSL command using a passphrase from the command line or while providing the passphrase through a temporary file…
- CVE-2024-53683MEDIUMCVSS 4.4EG 4.42025-01-17
A valid set of credentials in a .js file and a static token for communication were obtained from the decompiled IPA. An attacker could use the information to disrupt normal use of the application by changing the translation files and th…
- CVE-2022-20734MEDIUMCVSS 4.4EG 4.42022-05-04
A vulnerability in Cisco SD-WAN vManage Software could allow an authenticated, local attacker to view sensitive information on an affected system. This vulnerability is due to insufficient file system restrictions. An authenticated attacke…
- CVE-2025-63058MEDIUMCVSS 4.3EG 4.42025-12-09
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Hiroaki Miyashita Custom Field Template custom-field-template allows Retrieve Embedded Sensitive Data.This issue affects Custom Field Template: fro…
- CVE-2026-110466MEDIUMCVSS 4.3EG 4.32026-10-14
Tronclass developed by WisdomGarden has a Sensitive Data Exposure vulnerability. Authenticated remote attackers can bypass anonymous grading restrictions and obtain anonymous student information.
- CVE-2026-62036MEDIUMCVSS 4.3EG 4.32026-10-09
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in AREOI All Bootstrap Blocks all-bootstrap-blocks allows Retrieve Embedded Sensitive Data.This issue affects All Bootstrap Blocks: from n/a through 1…
- CVE-2026-104401MEDIUMCVSS 4.3EG 4.32026-10-05
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Memberful Memberful - Membership Plugin memberful-wp allows Retrieve Embedded Sensitive Data.This issue affects Memberful - Membership Plugin: from…
- CVE-2026-61911MEDIUMCVSS 4.3EG 4.32026-09-09
An issue was discovered in Cyrus IMAP before 3.12.4. There is a Sieve mailbox existence oracle. An authenticated user could install a Sieve script that probed whether another user's private mailbox existed, or read the value of shared mail…
- CVE-2026-58246MEDIUMCVSS 4.3EG 4.32026-07-28
SAP NetWeaver Application Server for ABAP and ABAP Platform writes sensitive session identifier information into a diagnostic trace when the trace is activated by a privileged user. An attacker with access to the resulting trace data could…
- CVE-2026-65535MEDIUMCVSS 4.3EG 4.32026-07-23
Contributor Sensitive Data Exposure in TinyMCE Templates <= 4.8.1 versions.
- CVE-2026-65458MEDIUMCVSS 4.3EG 4.32026-07-23
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Chouby Polylang and Chouby Polylang Pro allows Retrieve Embedded Sensitive Data. This issue affects Polylang: through 3.8.5; Polylang Pro: through…
- CVE-2026-57664MEDIUMCVSS 4.3EG 4.32026-06-26
Unauthenticated Sensitive Data Exposure in Bopo – WooCommerce Product Bundle Builder <= 1.1.6 versions.
- CVE-2026-24618MEDIUMCVSS 4.3EG 4.32026-06-12
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in HashThemes Hash Elements allows Retrieve Embedded Sensitive Data. This issue affects Hash Elements: from n/a through 1.5.4.
- CVE-2026-44749MEDIUMCVSS 4.3EG 4.32026-05-26
The SAP Gateway allows attackers to inject content into error messages, potentially leading to disclosure of request artefacts (e.g., regex patterns) and revealing underlying URI parsing logic. Leading to low impact on confidentiality. Int…
- CVE-2026-27349MEDIUMCVSS 4.3EG 4.32026-05-21
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPFunnels Team Mail Mint allows Retrieve Embedded Sensitive Data. This issue affects Mail Mint: from n/a through 1.19.5.
- CVE-2026-41339MEDIUMCVSS 4.3EG 4.32026-04-23
OpenClaw before 2026.4.2 exposes configPath and stateDir metadata in Gateway connect success snapshots to non-admin authenticated clients. Non-admin clients can recover host-specific filesystem paths and deployment details, enabling host f…
- CVE-2026-39572MEDIUMCVSS 4.3EG 4.32026-04-08
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in magepeopleteam Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Retrieve Embedded Sensitive Data.This issue…
- CVE-2026-39566MEDIUMCVSS 4.3EG 4.32026-04-08
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Designinvento DirectoryPress directorypress allows Retrieve Embedded Sensitive Data.This issue affects DirectoryPress: from n/a through <= 3.6.26.
- CVE-2026-39469MEDIUMCVSS 4.3EG 4.32026-04-08
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Softaculous PageLayer pagelayer allows Retrieve Embedded Sensitive Data.This issue affects PageLayer: from n/a through <= 2.0.8.
- CVE-2026-20691MEDIUMCVSS 4.3EG 4.32026-03-25
An authorization issue was addressed with improved state management. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4, watchOS 26.4. A maliciously crafted webpage may be able to fingerprint the …
- CVE-2026-24314MEDIUMCVSS 4.3EG 4.32026-02-24
Under certain conditions SAP S/4HANA (Manage Payment Media) allows an authenticated attacker to access information which would otherwise be restricted. This could cause low impact on confidentiality of the application while integrity and a…
- CVE-2026-24553MEDIUMCVSS 4.3EG 4.32026-01-23
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Dotstore Fraud Prevention For Woocommerce woo-blocker-lite-prevent-fake-orders-and-blacklist-fraud-customers allows Retrieve Embedded Sensitive Dat…
- CVE-2026-0494MEDIUMCVSS 4.3EG 4.32026-01-13
Under certain conditions SAP Fiori App Intercompany Balance Reconciliation application allows an attacker to access information which would otherwise be restricted. This has low impact on confidentiality of the application, integrity and a…
- CVE-2025-62083MEDIUMCVSS 4.3EG 4.32025-12-31
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WP Messiah BoomDevs WordPress Coming Soon coming-soon-by-boomdevs allows Retrieve Embedded Sensitive Data.This issue affects BoomDevs WordPress Com…
- CVE-2025-49340MEDIUMCVSS 4.3EG 4.32025-12-31
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Digages Direct Payments WP direct-payments-wp allows Retrieve Embedded Sensitive Data.This issue affects Direct Payments WP: from n/a through <= 1.…
- CVE-2025-62143MEDIUMCVSS 4.3EG 4.32025-12-31
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in nicashmu Post Video Players video-playlist-and-gallery-plugin allows Retrieve Embedded Sensitive Data.This issue affects Post Video Players: from n…
Map vulnerabilities like CWE-497 to your infrastructure
EchelonGraph correlates every CVE — across CWE-497 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →