CWE-209 通过错误消息导致的信息暴露 类弱点 395 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-209属于信息泄露漏洞，指软件在生成错误消息时意外包含敏感的环境、用户或数据信息。攻击者通常利用这些详细的错误堆栈或路径信息，识别系统架构、数据库结构或用户身份，从而辅助后续更精准的定向攻击。开发者应避免在生产环境中暴露内部细节，通过配置统一的通用错误页面、过滤敏感字段及记录日志而非直接展示，来防止敏感数据外泄。
try { /.../ } catch (Exception e) { System.out.println(e); }try { openDbConnection(); } //print exception message that includes exception message and configuration file location catch (Exception $e) { echo 'Caught exception: ', $e->getMessage(), '\n'; echo 'Check credentials in config file at: ', $Mysql_config_location, '\n'; }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-0049 | Fortra GoAnywhere 安全漏洞 — GoAnywhere | 3.5 | Low | 2025-04-28 |
| CVE-2025-46575 | ZTE GoldenDB 安全漏洞 — GoldenDB | 4.9 | Medium | 2025-04-27 |
| CVE-2025-25045 | IBM InfoSphere Information Server 安全漏洞 — InfoSphere Information Server | 4.3 | Medium | 2025-04-23 |
| CVE-2025-20150 | Cisco Nexus Dashboard 安全漏洞 — Cisco Nexus Dashboard | 5.3 | Medium | 2025-04-16 |
| CVE-2024-11129 | GitLab Enterprise Edition（EE） 安全漏洞 — GitLab | 6.3 | Medium | 2025-04-10 |
| CVE-2025-32238 | WordPress plugin Online Booking & Scheduling Calendar by vcita 安全漏洞 — Online Booking & Scheduling Calendar for WordPress by vcita | 4.3 | Medium | 2025-04-04 |
| CVE-2025-0279 | HCL Traveler 安全漏洞 — HCL Traveler | 4.3 | Medium | 2025-04-03 |
| CVE-2023-47639 | API Platform Core 安全漏洞 — core | 5.3 | Medium | 2025-04-03 |
| CVE-2024-55895 | IBM InfoSphere Information Server 安全漏洞 — InfoSphere Information Server | 2.7 | Low | 2025-03-29 |
| CVE-2025-31141 | JetBrains TeamCity 安全漏洞 — TeamCity | 2.7 | Low | 2025-03-27 |
| CVE-2024-12380 | GitLab EE/CE 安全漏洞 — GitLab | 4.4 | Medium | 2025-03-13 |
| CVE-2025-2239 | Hillstone Next Generation FireWall 安全漏洞 — Hillstone Next Generation FireWall | 5.3 | Medium | 2025-03-12 |
| CVE-2025-23185 | SAP Business Objects Business Intelligence Platform 安全漏洞 — SAP Business Objects Business Intelligence Platform | 4.1 | Medium | 2025-03-11 |
| CVE-2025-20002 | Apollo 安全漏洞 — Apollo | 5.3 | Medium | 2025-03-05 |
| CVE-2024-56810 | IBM EntireX 安全漏洞 — EntireX | 3.3 | Low | 2025-02-27 |
| CVE-2024-56496 | IBM EntireX 安全漏洞 — EntireX | 3.3 | Low | 2025-02-27 |
| CVE-2024-56495 | IBM EntireX 安全漏洞 — EntireX | 3.3 | Low | 2025-02-27 |
| CVE-2024-56811 | IBM EntireX 安全漏洞 — EntireX | 3.3 | Low | 2025-02-27 |
| CVE-2024-56493 | IBM EntireX 安全漏洞 — EntireX | 3.3 | Low | 2025-02-27 |
| CVE-2024-56494 | IBM EntireX 安全漏洞 — EntireX | 3.3 | Low | 2025-02-27 |
| CVE-2024-56812 | IBM EntireX 安全漏洞 — EntireX | 3.3 | Low | 2025-02-27 |
| CVE-2025-0941 | Beckman Coulter MET ONE 3400+ instruments running software 安全漏洞 — MET ONE 3400+ | 5.8 | Medium | 2025-02-26 |
| CVE-2024-13537 | WordPress plugin C9 Blocks 安全漏洞 — C9 Blocks | 5.3 | Medium | 2025-02-21 |
| CVE-2024-13535 | WordPress plugin Actionwear products sync 安全漏洞 — Actionwear products sync | 5.3 | Medium | 2025-02-18 |
| CVE-2024-13540 | WordPress plugin WooODT Lite 安全漏洞 — WooODT Lite – Delivery & pickup date time location for WooCommerce | 5.3 | Medium | 2025-02-18 |
| CVE-2024-13538 | WordPress plugin BigBuy Dropshipping Connector for WooCommerce 安全漏洞 — BigBuy Dropshipping Connector for WooCommerce | 5.3 | Medium | 2025-02-18 |
| CVE-2024-13539 | WordPress plugin AForms Eats 安全漏洞 — AForms Eats | 5.3 | Medium | 2025-02-12 |
| CVE-2024-52611 | SolarWinds Platform 安全漏洞 — SolarWinds Platform | 3.5 | Low | 2025-02-11 |
| CVE-2024-56467 | IBM EntireX 安全漏洞 — EntireX | 3.3 | Low | 2025-02-06 |
| CVE-2024-49798 | IBM ApplinX 安全漏洞 — ApplinX | 4.3 | Medium | 2025-02-05 |
CWE-209（通过错误消息导致的信息暴露） 是常见的弱点类别，本平台收录该类弱点关联的 395 条 CVE 漏洞。