Missing Custom Error Page

The product does not return custom error pages to the user, possibly exposing sensitive information.

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-27998 1Fortinet 1Fortipresence Jun 17, 2026 Sep 13, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 A lack of custom error pages vulnerability [CWE-756] in FortiPresence versions 1.2.0 through 1.2.1 and all versions of 1.1 and 1.0 may allow an unauthenticated attacker with the ability to navigate to the login GUI to ga...Show more A lack of custom error pages vulnerability [CWE-756] in FortiPresence versions 1.2.0 through 1.2.1 and all versions of 1.1 and 1.0 may allow an unauthenticated attacker with the ability to navigate to the login GUI to gain sensitive information via navigating to specific HTTP(s) paths.Show less
CVE-2022-3175 1Ikus Soft 1Rdiffweb Jun 17, 2026 Sep 13, 2022 N/A· v4 5.3 MEDIUM· v3 N/A· v2 Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2.
CVE-2018-8913 1Synology 1Web Station Jun 17, 2026 Apr 1, 2019 N/A· v4 6.1 MEDIUM· v3 5.8 MEDIUM· v2 Missing custom error page vulnerability in Synology Web Station before 2.1.3-0139 allows remote attackers to conduct phishing attacks via a crafted URL.