CWE-210: Self-generated Error Message Containing Sensitive Information
Filter
The product identifies an error condition and creates its own diagnostic or error messages that contain sensitive information.
What the weakness is: CWE-210 at MITRE. All weaknesses
Ask an AI about CWE-210
Show the prompt
Explain CWE-210: Self-generated Error Message Containing Sensitive Information and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/210.html and https://cve.bz/cve/cwe/210?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 3.7CVE-2026-73844EPSS 0.4%
CKAN MCP Server is a tool for querying CKAN open data portals. Prior to 0.4.112, error paths reflect raw upstream response bodies and internal exception messages back to the caller instead of a sanitized, generic message. When the server i…
- 8.8CVE-2023-41027EPSS 0.9%
Credential disclosure in the '/webs/userpasswd.htm' endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.4 and V1.0.5 allows an authenticated attacker to leak the password for the administrative account via requests to the vulne…
- 4.3CVE-2021-40126EPSS 0.9%
A vulnerability in the web-based dashboard of Cisco Umbrella could allow an authenticated, remote attacker to perform an email enumeration attack against the Umbrella infrastructure. This vulnerability is due to an overly descriptive error…
- 6.5CVE-2018-19947EPSS 0.8%
The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this information exposure vulnerability could disclose sensitive information. QNAP has already fixed the issue in Helpdesk 3.0.3 and later.