← Back
CWE-209

575 CVEs • Abstraction: Base • Likelihood of Exploit: High

Generation of Error Message Containing Sensitive Information

The product generates an error message that includes sensitive information about its environment, users, or associated data.

JSON object

Loading...

CVEs (575)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-11252
1Kubernetes
1Kubernetes
Jun 17, 2026
Jul 23, 2020
N/A· v4
6.5 MEDIUM· v3
5.0 MEDIUM· v2
The Kubernetes kube-controller-manager in versions v1.0-v1.17 is vulnerable to a credential leakage via error messages in mount failure logs and events for AzureFile and CephFS volumes.
CVE-2020-6511
4Debian
FedoraprojectGoogle+1 more
5Backports Sle
ChromeDebian Linux+2 more
Jun 17, 2026
Jul 22, 2020
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Information leak in content security policy in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVE-2020-15478
1Journal Theme
1Journal
Jun 17, 2026
Jul 1, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The Journal theme before 3.1.0 for OpenCart allows exposure of sensitive data via SQL errors.
CVE-2020-4341
1Ibm
1Security Secret Server
Jun 17, 2026
Jun 24, 2020
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against...Show more
IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 178181.Show less
CVE-2020-4327
1Ibm
1Security Secret Server
Jun 17, 2026
Jun 24, 2020
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against...Show more
IBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 177599.Show less
CVE-2020-4532
1Ibm
2Business Automation Workflow
Business Process Manager
Jun 17, 2026
Jun 17, 2020
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
IBM Business Automation Workflow and IBM Business Process Manager (IBM Business Process Manager Express 8.5.5, 8.5.6, 8.5.7, and 8.6) could allow a remote attacker to obtain sensitive information when a detailed technica...Show more
IBM Business Automation Workflow and IBM Business Process Manager (IBM Business Process Manager Express 8.5.5, 8.5.6, 8.5.7, and 8.6) could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 182716.Show less
CVE-2020-6503
1Google
1Chrome
Jun 17, 2026
Jun 3, 2020
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Inappropriate implementation in accessibility in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
CVE-2020-4248
1Ibm
1Security Identity Governance And Intelligence
Jun 17, 2026
May 28, 2020
N/A· v4
2.7 LOW· v3
4.0 MEDIUM· v2
IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in...Show more
IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 175484.Show less
CVE-2020-4357
1Ibm
1Spectrum Scale
Jun 17, 2026
May 27, 2020
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attac...Show more
IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 178761.Show less
CVE-2019-18865
1Blaauwproducts
1Remote Kiln Control
Jun 17, 2026
May 7, 2020
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Information disclosure via error message discrepancies in authentication functions in Blaauw Remote Kiln Control through v3.00r4 allows an unauthenticated attacker to enumerate valid usernames.
CVE-2019-12864
1Solarwinds
3Netpath
Network Performance MonitorOrion Platform
Jun 17, 2026
May 4, 2020
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
SolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4) is vulnerable to Information Leakage, because of improper error handling with stack traces, as demonstrated by discovering a full pathname upon a 500 Interna...Show more
SolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4) is vulnerable to Information Leakage, because of improper error handling with stack traces, as demonstrated by discovering a full pathname upon a 500 Internal Server Error via the api2/swis/query?lang=en-us&swAlertOnError=false query parameter.Show less
CVE-2019-4729
2Ibm
Netapp
2Cognos Analytics
Oncommand Insight
Jun 17, 2026
Apr 27, 2020
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks again...Show more
IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 172519.Show less
CVE-2020-4085
1Hcltech
1Connections
Jun 17, 2026
Apr 22, 2020
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
"HCL Connections is vulnerable to possible information leakage and could disclose sensitive information via stack trace to a local user."
CVE-2020-11883
1Divante
2Storefront Api
Vue Storefront Api
Jun 17, 2026
Apr 17, 2020
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception that discloses the error stack trace, with absolute file paths...Show more
In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception that discloses the error stack trace, with absolute file paths and Node.js module names.Show less
CVE-2020-4277
1Ibm
1Tririga Application Platform
Jun 17, 2026
Apr 17, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
IBM TRIRIGA Application Platform 3.5.3 and 3.6.1 discloses sensitive information in error messages that could aid an attacker formulate future attacks. IBM X-Force ID: 175993.
CVE-2019-4593
1Ibm
1Qradar Security Information And Event Manager
Jun 17, 2026
Apr 15, 2020
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
IBM QRadar 7.3.0 to 7.3.3 Patch 2 generates an error message that includes sensitive information that could be used in further attacks against the system. IBM X-ForceID: 167743.
CVE-2020-6438
4Debian
FedoraprojectGoogle+1 more
5Backports Sle
ChromeDebian Linux+2 more
Jun 17, 2026
Apr 13, 2020
N/A· v4
4.3 MEDIUM· v3
4.3 MEDIUM· v2
Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memo...Show more
Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension.Show less
CVE-2020-4164
1Ibm
1Security Information Queue
Jun 17, 2026
Apr 8, 2020
N/A· v4
2.7 LOW· v3
4.0 MEDIUM· v2
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could expose sensitive information from applicatino errors which could be used in further attacks against the system. IBM X-Force ID: 174...Show more
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could expose sensitive information from applicatino errors which could be used in further attacks against the system. IBM X-Force ID: 174400.Show less
CVE-2019-4601
1Ibm
1Rational Quality Manager
Jun 17, 2026
Apr 8, 2020
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to obtain sensitive information from a stack trace that could aid in further attacks against the system.
CVE-2020-11594
1Cipplanner
1Cipace
Jun 17, 2026
Apr 6, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request that causes a stack error to be shown providing the full file path.