← Back
CWE-200

11,754 CVEs • Abstraction: Class • Likelihood of Exploit: High

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

JSON object

Loading...

CVEs (11,754)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2016-8889
1Bitcoin Knots Project
1Bitcoin Knots
May 6, 2026
Oct 28, 2016
N/A· v4
6.2 MEDIUM· v3
2.1 LOW· v2
In Bitcoin Knots v0.11.0.ljr20150711 through v0.13.0.knots20160814 (fixed in v0.13.1.knots20161027), the debug console stores sensitive information including private keys and the wallet passphrase in its persistent comma...Show more
In Bitcoin Knots v0.11.0.ljr20150711 through v0.13.0.knots20160814 (fixed in v0.13.1.knots20161027), the debug console stores sensitive information including private keys and the wallet passphrase in its persistent command history.Show less
CVE-2016-8871
1Botan Project
1Botan
May 6, 2026
Oct 28, 2016
N/A· v4
6.2 MEDIUM· v3
2.1 LOW· v2
In Botan 1.11.29 through 1.11.32, RSA decryption with certain padding options had a detectable timing channel which could given sufficient queries be used to recover plaintext, aka an "OAEP side channel" attack.
CVE-2016-7919
1Moodle
1Moodle
May 6, 2026
Oct 28, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Moodle 3.1.2 allows remote attackers to obtain sensitive information via unspecified vectors, related to a "SQL Injection" issue affecting the Administration panel function in the installation process component. NOTE: t...Show more
Moodle 3.1.2 allows remote attackers to obtain sensitive information via unspecified vectors, related to a "SQL Injection" issue affecting the Administration panel function in the installation process component. NOTE: the vendor disputes the relevance of this report, noting that "the person who is installing Moodle must know database access credentials and they can access the database directly; there is no need for them to create a SQL injection in one of the installation dialogue fields.Show less
CVE-2016-6446
1Cisco
1Meeting Server
May 6, 2026
Oct 27, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A vulnerability in Web Bridge for Cisco Meeting Server could allow an unauthenticated, remote attacker to retrieve memory from a connected server. More Information: CSCvb03308. Known Affected Releases: 1.8, 1.9, 2.0.
CVE-2016-8295
1Oracle
1Peoplesoft Enterprise Human Capital Management Time And Labor
May 6, 2026
Oct 25, 2016
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.2 allows remote authenticated users to affect confidentiality via unknown vectors.
CVE-2016-8294
1Oracle
1Peoplesoft Enterprise Peopletools
May 6, 2026
Oct 25, 2016
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.54 and 8.55 allows remote authenticated users to affect confidentiality via unknown vectors.
CVE-2016-8286
1Oracle
1Mysql
May 6, 2026
Oct 25, 2016
N/A· v4
3.1 LOW· v3
3.5 LOW· v2
Unspecified vulnerability in Oracle MySQL 5.7.14 and earlier allows remote authenticated users to affect confidentiality via vectors related to Server: Security: Privileges.
CVE-2016-5621
1Oracle
1Flexcube Universal Banking
May 6, 2026
Oct 25, 2016
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 and 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect con...Show more
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 and 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality via vectors related to INFRA, a different vulnerability than CVE-2016-5603.Show less
CVE-2016-5618
1Oracle
1Data Integrator
May 6, 2026
Oct 25, 2016
N/A· v4
3.1 LOW· v3
3.5 LOW· v2
Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, 12.1.2.0.0, 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote authenticated users to affect confide...Show more
Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, 12.1.2.0.0, 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote authenticated users to affect confidentiality via vectors related to Code Generation Engine.Show less
CVE-2016-5611
1Oracle
1Vm Virtualbox
May 6, 2026
Oct 25, 2016
N/A· v4
4.3 MEDIUM· v3
2.1 LOW· v2
Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality via vectors related to Core.
CVE-2016-5603
1Oracle
1Flexcube Universal Banking
May 6, 2026
Oct 25, 2016
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect...Show more
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0 allows remote authenticated users to affect confidentiality via vectors related to INFRA, a different vulnerability than CVE-2016-5621.Show less
CVE-2016-5602
1Oracle
1Data Integrator
May 6, 2026
Oct 25, 2016
N/A· v4
5.7 MEDIUM· v3
3.5 LOW· v2
Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote authenticated users to affect confidentiality via...Show more
Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote authenticated users to affect confidentiality via vectors related to Code Generation Engine.Show less
CVE-2016-5597
1Oracle
2Jdk
Jre
May 6, 2026
Oct 25, 2016
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality via vectors related to Networking.
CVE-2016-5596
1Oracle
1Customer Relationship Management Technical Foundation
May 6, 2026
Oct 25, 2016
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote authenticated users to affect confidentiality via unknow...Show more
Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote authenticated users to affect confidentiality via unknown vectors.Show less
CVE-2016-5575
1Oracle
1Common Applications
May 6, 2026
Oct 25, 2016
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality via vectors rela...Show more
Unspecified vulnerability in the Oracle Common Applications Calendar component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality via vectors related to Resources Module.Show less
CVE-2016-5565
1Oracle
1Hospitality Opera 5 Property Services
May 6, 2026
Oct 25, 2016
N/A· v4
7.7 HIGH· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the Oracle Hospitality OPERA 5 Property Services component in Oracle Hospitality Applications 5.4.0.0 through 5.4.3.0, 5.5.0.0, and 5.5.1.0 allows remote authenticated users to affect confide...Show more
Unspecified vulnerability in the Oracle Hospitality OPERA 5 Property Services component in Oracle Hospitality Applications 5.4.0.0 through 5.4.3.0, 5.5.0.0, and 5.5.1.0 allows remote authenticated users to affect confidentiality via vectors related to OPERA.Show less
CVE-2016-5524
1Oracle
1Agile Product Lifecycle Management
May 6, 2026
Oct 25, 2016
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-...Show more
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2016-5527.Show less
CVE-2016-5522
1Oracle
1Agile Product Lifecycle Management
May 6, 2026
Oct 25, 2016
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via unknown vectors.
CVE-2016-5513
1Oracle
1Agile Product Lifecycle Management
May 6, 2026
Oct 25, 2016
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote authenticated users to affect confidentiality via vectors related to File Manager.
CVE-2016-5510
1Oracle
1Agile Product Lifecycle Management
May 6, 2026
Oct 25, 2016
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality via unknown vectors.