Vulnerabilities (CVE)

Filtered by CWE-598
Total 25 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-6287 1 Tribe29 1 Checkmk Appliance Firmware 2024-11-21 N/A 3.3 LOW
Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.8 allows local attacker to retrieve passwords via reading log files.
CVE-2023-50954 1 Ibm 1 Infosphere Information Server 2024-11-21 N/A 4.3 MEDIUM
IBM InfoSphere Information Server 11.7 returns sensitive information in URL information that could be used in further attacks against the system. IBM X-Force ID: 275776.
CVE-2021-21594 1 Dell 1 Emc Powerscale Onefs 2024-11-21 5.0 MEDIUM 8.2 HIGH
Dell PowerScale OneFS versions 8.2.2 - 9.1.0.x contain a use of get request method with sensitive query strings vulnerability. It can lead to potential disclosure of sensitive data. Dell recommends upgrading at your earliest opportunity.
CVE-2024-41738 1 Ibm 1 Txseries For Multiplatforms 2024-11-14 N/A 5.9 MEDIUM
IBM TXSeries for Multiplatforms 10.1 could allow an attacker to obtain sensitive information from the query string of an HTTP GET method to process a request which could be obtained using man in the middle techniques.
CVE-2024-32931 1 Johnsoncontrols 1 Exacqvision Web Service 2024-08-09 N/A 5.7 MEDIUM
Under certain circumstances the exacqVision Web Service can expose authentication token details within communications.