← Back
CWE-200

10,330 CVEs • Abstraction: Class • Likelihood of Exploit: High

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

JSON object

Loading...

CVEs (10,330)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-1999-0605
1Austin Contract Computing
1Merchant Order Form
Apr 16, 2026
Apr 1, 1999
N/A· v4
N/A· v3
5.0 MEDIUM· v2
An incorrect configuration of the Order Form 1.0 shopping cart CGI program could disclose private information.
CVE-1999-0372
1Microsoft
3Backoffice
Windows 2000Windows Nt
Apr 16, 2026
Feb 12, 1999
N/A· v4
N/A· v3
2.1 LOW· v2
The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted.
CVE-1999-0348
1Microsoft
1Internet Information Server
Apr 16, 2026
Jan 27, 1999
N/A· v4
N/A· v3
5.0 MEDIUM· v2
IIS ASP caching problem releases sensitive information when two virtual servers share the same physical directory.
CVE-1999-0632
-
-
May 28, 2026
Jan 1, 1999
N/A· v4
7.3 HIGH· v3
0.0 LOW· v2
The RPC portmapper service is running.
CVE-1999-0453
1Cisco
1Router
Apr 16, 2026
Jan 1, 1999
N/A· v4
N/A· v3
5.0 MEDIUM· v2
An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol (CDP).
CVE-1999-1136
1Hp
2Hp Ux
Mpe Ix
Apr 16, 2026
Jul 30, 1998
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Vulnerability in Predictive on HP-UX 11.0 and earlier, and MPE/iX 5.5 and earlier, allows attackers to compromise data transfer for Predictive messages (using e-mail or modem) between customer and Response Center Predict...Show more
Vulnerability in Predictive on HP-UX 11.0 and earlier, and MPE/iX 5.5 and earlier, allows attackers to compromise data transfer for Predictive messages (using e-mail or modem) between customer and Response Center Predictive systems.Show less
CVE-1999-0524
11Apple
CiscoHp+8 more
14Aix
BsdosHp Ux+11 more
May 28, 2026
Aug 1, 1997
N/A· v4
4.0 MEDIUM· v3
2.1 LOW· v2
ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.
CVE-1999-0059
1Sgi
1Irix
Apr 16, 2026
Jul 14, 1997
N/A· v4
7.3 HIGH· v3
7.1 HIGH· v2
IRIX fam service allows an attacker to obtain a list of all files on the server.
CVE-1999-0517
2Hp
Sun
2Hp Ux
Sunos
May 28, 2026
Jan 1, 1997
N/A· v4
5.9 MEDIUM· v3
7.5 HIGH· v2
An SNMP community name is the default (e.g. public), null, or missing.
CVE-1999-0511
1Microsoft
2Windows 2000
Windows Nt
May 28, 2026
Jan 1, 1997
N/A· v4
9.1 CRITICAL· v3
7.5 HIGH· v2
IP forwarding is enabled on a machine which is not a router or firewall.