← Back
CWE-200

11,841 CVEs • Abstraction: Class • Likelihood of Exploit: High

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

JSON object

Loading...

CVEs (11,841)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-1295
1Ibm
1Rational Collaborative Lifecycle Management
May 13, 2026
Oct 25, 2017
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
IBM RSA DM contains unspecified vulnerability in CLM Applications with potential for information leakage. IBM X-Force ID: 125157.
CVE-2017-1241
1Ibm
1Rational Collaborative Lifecycle Management
May 13, 2026
Oct 25, 2017
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
An unspecified vulnerability in IBM Jazz Foundation based applications might allow the display of stack trace information to an attacker. IBM X-Force ID: 124523.
CVE-2017-1583
1Ibm
1Liberty
May 13, 2026
Oct 24, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
IBM WebSphere Application Server (IBM Liberty for Java for Bluemix 3.13)could allow a remote attacker to obtain sensitive information caused by improper error handling by MyFaces in JSF.
CVE-2017-1211
1Ibm
1Daeja Viewone
May 13, 2026
Oct 24, 2017
N/A· v4
2.5 LOW· v3
1.9 LOW· v2
IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 could disclose sensitive information to a local user when logging is enabled. IBM X-Force ID: 123851.
CVE-2015-5173
2Cloudfoundry
Pivotal Software
3Cf Release
Cloud Foundry Elastic RuntimeCloud Foundry Uaa
May 13, 2026
Oct 24, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have unspecified impact via vectors involving emails with password recovery l...Show more
Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have unspecified impact via vectors involving emails with password recovery links, aka "Cross Domain Referer Leakage."Show less
CVE-2017-14327
1Extremenetworks
1Extremexos
May 13, 2026
Oct 23, 2017
N/A· v4
4.4 MEDIUM· v3
4.9 MEDIUM· v2
Extreme EXOS 16.x, 21.x, and 22.x allows administrators to read arbitrary files.
CVE-2017-7148
1Apple
1Iphone Os
May 13, 2026
Oct 23, 2017
N/A· v4
3.3 LOW· v3
4.3 MEDIUM· v2
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Location Framework" component. It allows attackers to obtain sensitive location information via a crafted app that rea...Show more
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Location Framework" component. It allows attackers to obtain sensitive location information via a crafted app that reads the location variable.Show less
CVE-2017-7142
1Apple
1Safari
May 13, 2026
Oct 23, 2017
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
An issue was discovered in certain Apple products. Safari before 11 is affected. The issue involves the "WebKit Storage" component. It allows attackers to bypass the Safari Private Browsing protection mechanism, and cons...Show more
An issue was discovered in certain Apple products. Safari before 11 is affected. The issue involves the "WebKit Storage" component. It allows attackers to bypass the Safari Private Browsing protection mechanism, and consequently obtain sensitive information about visited web sites.Show less
CVE-2017-7141
1Apple
1Mac Os X
May 13, 2026
Oct 23, 2017
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Mail" component. It allows remote attackers to bypass an intended off value of the "Load remote content in messag...Show more
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Mail" component. It allows remote attackers to bypass an intended off value of the "Load remote content in messages" setting, and consequently discover an e-mail recipient's IP address, via an HTML email message.Show less
CVE-2017-7140
1Apple
1Iphone Os
May 13, 2026
Oct 23, 2017
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Keyboard Suggestions" component. It allows attackers to obtain sensitive information by reading keyboard autocorrect s...Show more
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Keyboard Suggestions" component. It allows attackers to obtain sensitive information by reading keyboard autocorrect suggestions.Show less
CVE-2017-7139
1Apple
1Iphone Os
May 13, 2026
Oct 23, 2017
N/A· v4
2.4 LOW· v3
2.1 LOW· v2
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Phone" component. It allows attackers to obtain sensitive information by leveraging a timing bug to read a secure-cont...Show more
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Phone" component. It allows attackers to obtain sensitive information by leveraging a timing bug to read a secure-content screenshot that occurred during a locking action.Show less
CVE-2017-7138
1Apple
1Mac Os X
May 13, 2026
Oct 23, 2017
N/A· v4
3.3 LOW· v3
2.1 LOW· v2
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Directory Utility" component. It allows local users to discover the Apple ID of the computer's owner.
CVE-2017-7131
1Apple
1Iphone Os
May 13, 2026
Oct 23, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Bluetooth" component. It allows attackers to obtain sensitive Contact card information via a crafted app.
CVE-2017-7116
1Apple
3Iphone Os
TvosWatchos
May 13, 2026
Oct 23, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "Wi-Fi" component. It might allow remote attackers to read da...Show more
An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "Wi-Fi" component. It might allow remote attackers to read data from kernel memory locations via crafted Wi-Fi traffic.Show less
CVE-2017-7090
1Apple
5Icloud
Iphone OsItunes+2 more
May 13, 2026
Oct 23, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected....Show more
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive cookie information via a custom URL scheme.Show less
CVE-2017-7082
1Apple
1Mac Os X
May 13, 2026
Oct 23, 2017
N/A· v4
2.4 LOW· v3
2.1 LOW· v2
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Screen Lock" component. It allows physically proximate attackers to read Application Firewall prompts.
CVE-2017-13127
1Vip
1Vip
May 13, 2026
Oct 20, 2017
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
The VIP.com application for IOS and Android allows remote attackers to obtain sensitive information and hijack the authentication of users via a rogue access point and a man-in-the-middle attack.
CVE-2017-2131
1Panasonic
1Kx Hjb1000 Firmware
May 13, 2026
Oct 20, 2017
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000_4.47 allow an attacker to bypass access restrictions to view the configuration menu via unspecified vectors.
CVE-2015-6668
1Wp Jobmanager
1Job Manager
May 13, 2026
Oct 19, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The Job Manager plugin before 0.7.25 allows remote attackers to read arbitrary CV files via a brute force attack to the WordPress upload directory structure, related to an insecure direct object reference.
CVE-2012-4382
1Mediawiki
1Mediawiki
May 13, 2026
Oct 19, 2017
N/A· v4
4.9 MEDIUM· v3
4.0 MEDIUM· v2
MediaWiki before 1.18.5, and 1.19.x before 1.19.2 does not properly protect user block metadata, which allows remote administrators to read a user block reason via a reblock attempt.