Server-generated Error Message Containing Sensitive Information

Certain conditions, such as network failure, will cause a server error message to be displayed.

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-36419 1Ibm 1Applinx Jun 17, 2026 Jan 20, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 IBM ApplinX 11.1 could disclose sensitive information about server architecture that could aid in further attacks against the system.
CVE-2025-62168 1Squid Cache 1Squid Jun 17, 2026 Oct 17, 2025 N/A· v4 7.5 HIGH· v3 N/A· v2 Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass brows...Show more Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing. These attacks do not require Squid to be configured with HTTP authentication. The vulnerability is fixed in version 7.2. As a workaround, disable debug information in administrator mailto links generated by Squid by configuring squid.conf with email_err_data off.Show less
CVE-2023-5617 1Hitachi 1Vantara Pentaho Data Integration And Analytics Jun 17, 2026 Feb 28, 2024 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Hitachi Vantara Pentaho Data Integration & Analytics versions before 10.1.0.0 and 9.3.0.6, including 9.5.x and 8.3.x, display the version of Tomcat when a server error is encountered.
CVE-2023-40726 1Siemens 1Qms Automotive Jun 17, 2026 Sep 12, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application server responds with sensitive information about the server. This could allow an attacker to directly access the dat...Show more A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application server responds with sensitive information about the server. This could allow an attacker to directly access the database.Show less