The product's intended functionality exposes information to certain actors in accordance with the developer's security policy, but this information is regarded as sensitive according to the intended security policies of other stakeholders such as the product's administrator, users, or others whose information is being processed.
Volume of CVEs assigned to CWE-213 and their average CVSS base score over time.
Top CVEs that have been assigned this CWE. A single CVE can have multiple CWE assignments, though many have just one.
31 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-33216HIGH NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, for MQTT deployments using usercodes/passwords | Mar 25, 2026 | 7.5 | 34 | NO | NO |
CVE-2026-6280MEDIUM Exposure of sensitive information due to incompatible policies vulnerability in NOMYSOFT Informatics Education and Consulting Inc. Nomysem allows Accessing Functionality Not Proper | Jul 8, 2026 | 6.5 | 31 | NO | NO |
CVE-2023-3441CRITICAL An issue has been discovered in GitLab EE/CE affecting all versions starting from 8.0 before 16.4. The product did not sufficiently warn about security implications of granting mer | Oct 1, 2024 | 9.1 | 27 | NO | NO |
CVE-2025-54831MEDIUM Apache Airflow 3 introduced a change to the handling of sensitive information in Connections. The intent was to restrict access to sensitive connection fields to Connection Editing | Sep 26, 2025 | 6.5 | 26 | NO | NO |
CVE-2024-49827HIGH IBM Concert Software 1.0.0 through 1.1.0 is vulnerable to excessive data exposure, allowing attackers to access sensitive information without proper filtering. | Aug 18, 2025 | 7.5 | 25 | NO | NO |
CVE-2022-30350HIGH Avanquest Software RAD PDF (PDFEscape Online) 3.19.2.2 is vulnerable to Information Leak / Disclosure. The PDFEscape Online tool provides users with a "white out" functionality for | Mar 30, 2023 | 7.5 | 24 | NO | NO |
CVE-2020-1652CRITICAL OpenNMS is accessible via port 9443 | Jul 17, 2020 | 9.8 | 24 | NO | NO |
CVE-2019-1010283HIGH Univention Corporate Server univention-directory-notifier 12.0.1-3 and earlier is affected by: CWE-213: Intentional Information Exposure. The impact is: Loss of Confidentiality. Th | Jul 17, 2019 | 7.5 | 24 | NO | NO |
CVE-2024-49354HIGH IBM Concert 1.0.0, 1.0.1, and 1.0.2 is vulnerable to sensitive information disclosure through specially crafted API Calls. | Jan 18, 2025 | 7.5 | 22 | NO | NO |
CVE-2023-6517HIGH Exposure of Sensitive Information Due to Incompatible Policies vulnerability in Mia Technology Inc. MİA-MED allows Collect Data as Provided by Users.
This issue affects MİA-MED: b | Feb 8, 2024 | 7.5 | 22 | NO | NO |
Exploit activity across CVEs assigned to this CWE, including CVEs that carry other CWE assignments.
Social posts that mention CVE IDs assigned to this CWE. This is assigned-CVE activity, not mentions of the CWE label itself.
Media articles that mention CVE IDs assigned to this CWE. This is assigned-CVE coverage, not mentions of the CWE label itself.