Advisories · Weakness

CWE-213.

Every Advisory and CVE whose sources give the weakness CWE-213, newest first.

CVE-2026-0893 CVE record

CVSS 5.8 Medium

Uncleared Password Keystrokes Vulnerability
- AMI AptioV
- CWE-213
Not analysed yet 13 Oct 2026
CVE-2026-107761 CVE record

CVSS 5.3 Medium

Channel tokens and organization API key exposed in API responses
- GitroomHQ postiz-app
- Information disclosure
- CWE-213
Not analysed yet 11 Oct 2026
org.graylog2:graylog2-server Maven

CVSS 5.0 Medium

Graylog Server: System Catalog titles endpoint can be used to retrieve values of protected database fields
- CWE-213
>=7.1.0, <7.1.4 · fixed in 7.1.4

GHSA-q79r-r9xg-r863 · CVE-2026-55425 Not analysed yet 28 Aug 2026
CVE-2026-56538 CVE record

CVSS 3.5 Low

HCL Connections is vulnerable to information disclosure
- HCLSoftware Connections
- CWE-213
Not analysed yet 27 Jul 2026
CVE-2026-6280 CVE record

CVSS 6.5 Medium

Improper Access Control in Nomysoft Informatics' Nomysem
- NOMYSOFT Informatics Education and Consulting Inc. Nomysem
- CWE-213
Not analysed yet 8 Jul 2026
github.com/nats-io/nats-server +1 Go

CVSS 8.6 High

NATS has MQTT plaintext password disclosure
- CWE-213
- CWE-256
* · no fixed version yet

GHSA-v722-jcv5-w7mc · CVE-2026-33216 Not analysed yet 24 Mar 2026
CVE-2025-52603 CVE record

CVSS 3.5 Low

HCL Connections is vulnerable to information disclosure
- HCLSoftware Connections
- CWE-213
Not analysed yet 20 Feb 2026
apache-airflow PyPI

CVSS 6.5 Medium

Apache Airflow 3 introduced a change to the handling of sensitive information in Connections. The intent was to restrict access to sensitive connection fields to Connection Editing Users, effective...
- CWE-213
· no fixed version yet

GHSA-q475-2pgm-7hvp · CVE-2025-54831 Not analysed yet 26 Sept 2025
CVE-2024-49827 CVE record

CVSS 3.7 Low

IBM Concert Software information disclosure
- IBM Concert Software
- CWE-213
Not analysed yet 18 Aug 2025
CVE-2025-4976 CVE record

CVSS 4.3 Medium

Exposure of Sensitive Information Due to Incompatible Policies in GitLab
- GitLab
- CWE-213
Not analysed yet 24 Jul 2025
@backstage/plugin-permission-backend npm

CVSS 4.3 Medium

Permission policy information leakage in Backstage permission system
- CWE-213
<0.6.0 · fixed in 0.6.0

GHSA-f8j4-p5cr-p777 · CVE-2025-32791 Not analysed yet 16 Apr 2025
CVE-2025-24316 CVE record

CVSS 6.9 Medium

Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application Exposure of Sensitive Information Due to Incompatible Policies
- Dario Health Dario Application Database and Internet-based Server Infrastructure
- CWE-213
Not analysed yet 28 Feb 2025
CVE-2024-49354 CVE record

CVSS 5.3 Medium

IBM Concert information disclosure
- IBM Concert Software
- CWE-213
Not analysed yet 18 Jan 2025
CVE-2023-5117 CVE record

CVSS 3.7 Low

Exposure of Sensitive Information Due to Incompatible Policies in GitLab
- GitLab
- CWE-213
Not analysed yet 25 Dec 2024
CVE-2023-3441 CVE record

CVSS 6.6 Medium

Exposure of Sensitive Information Due to Incompatible Policies in GitLab
- GitLab
- CWE-213
Not analysed yet 1 Oct 2024
CVE-2024-44121 CVE record

CVSS 4.3 Medium

Information Disclosure in SAP S/4 HANA (Statutory Reports)
- SAP_SE SAP S/4 HANA (Statutory Reports)
- CWE-213
Not analysed yet 10 Sept 2024
CVE-2024-7267 CVE record

CVSS 7.1 High

Internal infrastructure data leak in EZD RP
- Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP
- CWE-213
Not analysed yet 7 Aug 2024
CVE-2023-6517 CVE record

CVSS 7.5 High

Seeing the SMS Verification Code in Mia Technology's Mia-Med
- Mia Technology Inc. MİA-MED
- CWE-213
Not analysed yet 8 Feb 2024
datasette PyPI

CVSS 5.3 Medium

Datasette 1.0 alpha series leaks names of databases and tables to unauthenticated users
- Information disclosure
- CWE-213
>=1.0a0, <1.0a4 · fixed in 1.0a4

GHSA-7ch3-7pp7-7cpq · CVE-2023-40570 Not analysed yet 22 Aug 2023
CVE-2023-36919 CVE record

CVSS 5.3 Medium

Information Disclosure in SAP Enable Now
- SAP_SE SAP Enable Now
- CWE-213
Not analysed yet 11 Jul 2023
CVE-2023-27465 CVE record

CVSS 4.6 Medium

Siemens SIMOTION C240: A vulnerability has been identified in SIMOTION C240 (All versions >= V5.4 < V5.5 SP1)…
- Siemens SIMOTION C240
- Siemens SIMOTION C240 PN
- CWE-213
Not analysed yet 13 Jun 2023
CVE-2022-30350 CVE record

CVSS 7.5 High

Avanquest Software RAD PDF (PDFEscape Online) 3.19.2.2 is vulnerable to Information Leak / Disclosure.
- CWE-213
Not analysed yet 30 Mar 2023
CVE-2022-39848 CVE record

CVSS 4.0 Medium

Exposure of sensitive information in AT_Distributor prior to SMR Oct-2022 Release 1 allows local attacker to access SerialNo via log.
- Samsung Mobile Devices
- CWE-213
Not analysed yet 7 Oct 2022
CVE-2022-33696 CVE record

CVSS 4.0 Medium

Exposure of Sensitive Information in Telephony service prior to SMR Jul-2022 Release 1 allows local attacker to access imsi and iccid via log.
- Samsung Mobile Devices
- CWE-213
Not analysed yet 11 Jul 2022
CVE-2022-33694 CVE record

CVSS 4.0 Medium

Exposure of Sensitive Information in CSC application prior to SMR Jul-2022 Release 1 allows local attacker to access wifi information via unprotected intent broadcasting.
- Samsung Mobile Devices
- CWE-213
Not analysed yet 11 Jul 2022
CVE-2022-33692 CVE record

CVSS 4.0 Medium

Exposure of Sensitive Information in Messaging application prior to SMR Jul-2022 Release 1 allows local attacker to access imsi and iccid via log.
- Samsung Mobile Devices
- CWE-213
Not analysed yet 11 Jul 2022
CVE-2022-30728 CVE record

CVSS 1.9 Low

Information exposure vulnerability in ScanPool prior to SMR Jun-2022 Release 1 allows local attackers to get MAC address information.
- Samsung Mobile Devices
- CWE-213
Not analysed yet 7 Jun 2022
CVE-2022-30714 CVE record

CVSS 1.9 Low

Information exposure vulnerability in SemIWCMonitor prior to SMR Jun-2022 Release 1 allows local attackers to get MAC address information.
- Samsung Mobile Devices
- CWE-213
Not analysed yet 7 Jun 2022
CVE-2022-28794 CVE record

CVSS 2.2 Low

Sensitive information exposure in low-battery dumpstate log prior to SMR Jun-2022 Release 1 allows local attackers to get SIM card information.
- Samsung Mobile Devices
- CWE-213
Not analysed yet 7 Jun 2022
CVE-2022-22541 CVE record

SAP SE SAP BusinessObjects Business Intelligence Platform: SAP BusinessObjects Business Intelligence Platform - versions 420, 430…
- SAP SE SAP BusinessObjects Business Intelligence Platform
- CWE-213
Not analysed yet 12 Apr 2022
sylius/sylius Packagist

CVSS 5.0 Medium

Sensitive Information Exposure in Sylius
- Information disclosure
- CWE-213
<1.9.10 || >=1.10, <1.10.11 || >=1.11, <1.11.2 · fixed in 1.9.10, 1.10.11, 1.11.2

GHSA-7563-75j9-6h5p · CVE-2022-24742 Not analysed yet 14 Mar 2022
CVE-2020-1652 CVE record

CVSS 5.6 Medium

Junos Space: OpenNMS is accessible via port 9443
- Juniper Networks Junos Space
- CWE-213
Not analysed yet 17 Jul 2020
CVE-2017-3211 CVE record

CVSS 5.3 Medium

Centire Yopify leaks customer information
- Centire Yopify
- CWE-213
Not analysed yet 15 Jan 2020
CVE-2019-1010283 CVE record

Univention Corporate Server univention-directory-notifier: Univention Corporate Server univention-directory-notifier 12.0.1-3 and earlier is…
- Univention Corporate Server univention-directory-notifier
- CWE-213
Not analysed yet 17 Jul 2019
org.eclipse.jetty:jetty-server Maven

CVSS 5.3 Medium

Information Exposure vulnerability in Eclipse Jetty
- Information disclosure
- CWE-213
>=9.2.0, <9.2.28.v20190418 || >=9.3.0, <9.3.27.v20190418 || >=9.4.0, <9.4.17.v20190418 · fixed in 9.2.28.v20190418, 9.3.27.v20190418, 9.4.17.v20190418

GHSA-r28m-g6j9-r2h5 · CVE-2019-10246 Not analysed yet 23 Apr 2019
org.eclipse.jetty:jetty-server Maven

CVSS 5.3 Medium

Installation information leak in Eclipse Jetty
- Information disclosure
- CWE-213
>=7.0.0, <9.2.28.v20190418 || >=9.3.0, <9.3.27.v20190418 || >=9.4.0, <9.4.17.v20190418 · fixed in 9.2.28.v20190418, 9.3.27.v20190418, 9.4.17.v20190418

GHSA-xc67-hjx6-cgg6 · CVE-2019-10247 Not analysed yet 23 Apr 2019