CWE-359 侵犯隐私 类弱点 147 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-359 指软件未能有效防止未授权主体访问个人私密信息，属于隐私泄露类漏洞。攻击者常利用身份验证缺陷、权限配置错误或接口逻辑漏洞，非法获取敏感数据。开发者应实施严格的访问控制策略，确保仅授权用户可访问数据，同时遵循最小权限原则，并对敏感信息进行加密存储与传输，从而杜绝非授权访问风险。
pass = GetPassword(); ... dbmsLog.WriteLine(id + ":" + pass + ":" + type + ":" + tstamp);<uses-permission android:name="android.permission.ACCESS_FINE_LOCATION"/>locationClient = new LocationClient(this, this, this); locationClient.connect(); Location userCurrLocation; userCurrLocation = locationClient.getLastLocation(); deriveStateFromCoords(userCurrLocation);| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-24735 | Apache Answer 安全漏洞 — Apache Answer | 5.3AI | Medium AI | 2026-02-04 |
| CVE-2025-11598 | Ministerstwo Cyfryzacji mObywatel 安全漏洞 — mObywatel | 4.0AI | Medium AI | 2026-02-03 |
| CVE-2025-14317 | Crazy Bubble Tea App 安全漏洞 — Crazy Bubble Tea | 6.5AI | Medium AI | 2026-01-14 |
| CVE-2025-3950 | GitLab Enterprise Edition（EE）和GitLab Community Edition（CE） 安全漏洞 — GitLab | 3.5 | Low | 2026-01-09 |
| CVE-2025-68945 | Gitea 安全漏洞 — Gitea | 5.8 | Medium | 2025-12-26 |
| CVE-2025-13008 | M-Files Server 安全漏洞 — M-Files Server | 6.5AI | Medium AI | 2025-12-19 |
| CVE-2025-1030 | Utarit SoliClub 安全漏洞 — SoliClub | 7.5 | High | 2025-12-18 |
| CVE-2025-34441 | AVideo 安全漏洞 — AVideo | 7.5AI | High AI | 2025-12-17 |
| CVE-2025-10450 | RTI Connext Professional 安全漏洞 — Connext Professional | 6.1 | Medium | 2025-12-16 |
| CVE-2025-0969 | WordPress plugin Brizy – Page Builder 安全漏洞 — Brizy – Page Builder | 6.5 | Medium | 2025-12-13 |
| CVE-2025-66510 | Nextcloud Server 安全漏洞 — security-advisories | 4.5 | Medium | 2025-12-05 |
| CVE-2025-12536 | WordPress plugin SureForms 安全漏洞 — SureForms – Contact Form, Payment Form & Other Custom Form Builder | 5.3 | Medium | 2025-11-13 |
| CVE-2025-36131 | IBM Db2 安全漏洞 — Db2 | 4.6 | Medium | 2025-11-07 |
| CVE-2025-52602 | HCL BigFix Query 安全漏洞 — BigFix Query | 4.2 | Medium | 2025-11-05 |
| CVE-2025-35981 | Gallagher Command Centre Server 安全漏洞 — Command Centre Server | 5.5 | Medium | 2025-10-23 |
| CVE-2025-62644 | Restaurant Brands International assistant platform 安全漏洞 — assistant platform | 5.0 | Medium | 2025-10-17 |
| CVE-2025-53950 | Fortinet FortiDLP 安全漏洞 — FortiDLP | 5.1 | Medium | 2025-10-16 |
| CVE-2025-62362 | Burgerportaal 安全漏洞 — GPP-burgerportaal | 4.3AI | Medium AI | 2025-10-13 |
| CVE-2025-5009 | Google Gemini iOS 安全漏洞 — Gemini | 5.7AI | Medium AI | 2025-10-08 |
| CVE-2025-59843 | Flag Forge 安全漏洞 — flagForge | 5.3 | - | 2025-09-26 |
| CVE-2025-41685 | SMA Solar Technology AG ennexos.sunnyportal.com 安全漏洞 — ennexos.sunnyportal.com | 6.5 | Medium | 2025-08-19 |
| CVE-2025-53765 | Microsoft Azure Stack 安全漏洞 — Azure Stack Hub | 4.4 | Medium | 2025-08-12 |
| CVE-2025-54125 | XWiki Platform 安全漏洞 — xwiki-platform | 8.1AI | High AI | 2025-08-05 |
| CVE-2025-54124 | XWiki Platform 安全漏洞 — xwiki-platform | 6.5AI | Medium AI | 2025-08-05 |
| CVE-2025-53625 | DynamicPageList3 安全漏洞 — DynamicPageList3 | 5.3AI | Medium AI | 2025-07-10 |
| CVE-2025-53374 | Dokploy 安全漏洞 — dokploy | 4.3AI | Medium AI | 2025-07-07 |
| CVE-2025-6017 | Red Hat Advanced Cluster Management 安全漏洞 | 5.5 | Medium | 2025-07-02 |
| CVE-2025-49715 | Microsoft Dynamics 365 FastTrack Implementation 安全漏洞 — Dynamics 365 FastTrack Implementation | 7.5 | High | 2025-06-20 |
| CVE-2025-49134 | Weblate 安全漏洞 — weblate | 5.3AI | Medium AI | 2025-06-16 |
| CVE-2025-5334 | Devolutions Remote Desktop Manager 安全漏洞 — Remote Desktop Manager | 6.5AI | Medium AI | 2025-05-29 |
CWE-359（侵犯隐私） 是常见的弱点类别，本平台收录该类弱点关联的 147 条 CVE 漏洞。