CWE-209 通过错误消息导致的信息暴露 类弱点 395 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-209属于信息泄露漏洞，指软件在生成错误消息时意外包含敏感的环境、用户或数据信息。攻击者通常利用这些详细的错误堆栈或路径信息，识别系统架构、数据库结构或用户身份，从而辅助后续更精准的定向攻击。开发者应避免在生产环境中暴露内部细节，通过配置统一的通用错误页面、过滤敏感字段及记录日志而非直接展示，来防止敏感数据外泄。
try { /.../ } catch (Exception e) { System.out.println(e); }try { openDbConnection(); } //print exception message that includes exception message and configuration file location catch (Exception $e) { echo 'Caught exception: ', $e->getMessage(), '\n'; echo 'Check credentials in config file at: ', $Mysql_config_location, '\n'; }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-45658 | IBM Security Verify Access 安全漏洞 — Security Verify Access Appliance | 2.7 | Low | 2025-02-04 |
| CVE-2024-45659 | IBM Security Verify Access 安全漏洞 — Security Verify Access Appliance | 5.3 | Medium | 2025-02-04 |
| CVE-2025-23216 | Argo CD 安全漏洞 — argo-cd | 6.8 | Medium | 2025-01-30 |
| CVE-2024-35134 | IBM Analytics Content Hub 安全漏洞 — Analytics Content Hub | 5.3 | Medium | 2025-01-25 |
| CVE-2023-38713 | IBM Cloud Pak System 安全漏洞 — Cloud Pak System | 5.3 | Medium | 2025-01-25 |
| CVE-2023-38714 | IBM Cloud Pak System 安全漏洞 — Cloud Pak System | 5.3 | Medium | 2025-01-25 |
| CVE-2023-38716 | IBM Cloud Pak System 安全漏洞 — Cloud Pak System | 5.3 | Medium | 2025-01-25 |
| CVE-2024-35111 | IBM Control Center 安全漏洞 — Control Center | 4.3 | Medium | 2025-01-25 |
| CVE-2025-24552 | WordPress plugin Paytium 安全漏洞 — Paytium | 5.3 | Medium | 2025-01-24 |
| CVE-2024-13536 | WordPress plugin 1003 Mortgage Application 安全漏洞 — 1003 Mortgage Application | 5.3 | Medium | 2025-01-21 |
| CVE-2024-52898 | IBM MQ 安全漏洞 — MQ | 6.2 | Medium | 2025-01-14 |
| CVE-2025-0053 | SAP NetWeaver Application Server 安全漏洞 — SAP NetWeaver Application Server for ABAP and ABAP Platform | 5.3 | Medium | 2025-01-14 |
| CVE-2022-22363 | IBM Cognos Controller和IBM Controller 安全漏洞 — Controller | 4.3 | Medium | 2025-01-07 |
| CVE-2021-20455 | IBM Cognos Controller和IBM Controller 安全漏洞 — Controller | 3.7 | Low | 2025-01-07 |
| CVE-2024-25037 | IBM Cognos Controller和IBM Controller 安全漏洞 — Controller | 4.3 | Medium | 2025-01-07 |
| CVE-2024-52893 | IBM Concert 安全漏洞 — Concert Software | 5.3 | Medium | 2025-01-07 |
| CVE-2024-11625 | Progress Sitefinity 安全漏洞 — Sitefinity | 7.7 | High | 2025-01-07 |
| CVE-2024-5591 | IBM Jazz Foundation 安全漏洞 — Jazz Foundation | 4.3 | Medium | 2025-01-03 |
| CVE-2024-39725 | IBM Engineering Lifecycle Optimization 安全漏洞 — Engineering Insights | 5.3 | Medium | 2024-12-25 |
| CVE-2024-23945 | Apache Hive和Apache Spark 安全漏洞 — Apache Hive | 8.2 | - | 2024-12-23 |
| CVE-2024-52897 | IBM MQ Appliance 安全漏洞 — MQ | 6.2 | Medium | 2024-12-19 |
| CVE-2024-52896 | IBM MQ Appliance 安全漏洞 — MQ | 6.2 | Medium | 2024-12-19 |
| CVE-2024-49818 | IBM Security Guardium Key Lifecycle Manager 安全漏洞 — Security Guardium Key Lifecycle Manager | 4.3 | Medium | 2024-12-17 |
| CVE-2024-54366 | WordPress plugin Vimeography 安全漏洞 — Vimeography | 5.3 | Medium | 2024-12-16 |
| CVE-2024-51460 | IBM InfoSphere Information Server 安全漏洞 — InfoSphere Information Server | 4.3 | Medium | 2024-12-11 |
| CVE-2024-53948 | Apache Superset 安全漏洞 — Apache Superset | 5.3 | - | 2024-12-09 |
| CVE-2024-54141 | phpMyFAQ 安全漏洞 — phpMyFAQ | 8.6 | High | 2024-12-06 |
| CVE-2024-53253 | Sentry 安全漏洞 — sentry | 5.3 | Medium | 2024-11-22 |
| CVE-2024-48896 | Moodle 安全漏洞 | 4.3AI | Medium AI | 2024-11-18 |
| CVE-2021-3986 | Calibre-Web 安全漏洞 — janeczku/calibre-web | 4.3AI | Medium AI | 2024-11-15 |
CWE-209（通过错误消息导致的信息暴露） 是常见的弱点类别，本平台收录该类弱点关联的 395 条 CVE 漏洞。