CWE-210 Self-generated Error Message Containing Sensitive Information
baseThe product identifies an error condition and creates its own diagnostic or error messages that contain sensitive information.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (5)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-41027US | high8.8 | — | ||
Credential disclosure in the '/webs/userpasswd.htm' endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.4 and V1.0.5 allows an authenticated attacker to leak the passwo… | ||||
| CVE-2018-19947US | medium6.5 | — | ||
The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this information exposure vulnerability could disclose sensitive information. QNAP has al… | ||||
| CVE-2018-6296US | medium5.3 | — | ||
An undocumented (hidden) capability for switching the web interface in Hanwha Techwin Smartcams | ||||
| CVE-2021-40126US | medium4.3 | — | ||
A vulnerability in the web-based dashboard of Cisco Umbrella could allow an authenticated, remote attacker to perform an email enumeration attack against the Umbrella infrastructur… | ||||
| CVE-2026-73844US | — | — | ||
CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, error paths reflect raw upstream response bodies and internal exception messages back to the caller… | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan