On this page
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Weakness Summary
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
- Canonical source: MITRE CWE-200 (opens in a new tab)
- Published Atomicorp CVE observations: 114
- Distinct affected products in those observations: 103
- Active Atomicorp rules associated with this weakness: 94
Atomicorp Research Context
Atomicorp has published CVE-specific research observations associated with this weakness category. Each linked CVE page states whether the tested request was detected or blocked and is the authoritative customer-facing finding.
The CVEs and rules shown here are selected published examples, not a complete list of Atomicorp protections. If a CWE, CVE, or rule is absent from this page, no conclusion should be drawn about whether Atomicorp protects against that weakness or attack method.
A CWE describes a class of software weakness. It does not identify one exploit request, and association with a CWE does not mean that every vulnerability or exploitation path in that category is detected or blocked.
Selected Published CVE Observations
| CVE | Vulnerability | Product | Atomicorp finding | Observed rules |
|---|---|---|---|---|
| CVE-2026-51027 | FileThingie v.2.5.7 Information Disclosure Vulnerability | - | Protected by Atomicorp rules | 340007 , 344360 , 390709 |
| CVE-2017-11165 | DataTaker DT80 dEX 1.50.012 - Information Disclosure | dt80 dex firmware | Protected by Atomicorp rules | 390716 |
| CVE-2018-0127 | Cisco RV132W/RV134W Router - Information Disclosure | rv132w firmware | Protected by Atomicorp rules | 312863 , 390716 |
| CVE-2018-15534 | Geutebrueck re_porter 7.8.974.20 - Credential Disclosure | re porter 16 firmware | Protected by Atomicorp rules | 390727 , 392301 , 392648 |
| CVE-2018-7251 | Anchor CMS 0.12.3 - Error Log Exposure | anchor | Protected by Atomicorp rules | 390716 |
| CVE-2025-11749 | WordPress AI Engine Plugin MCP Unauthenticated Admin Creation to RCE | AI Engine – The Chatbot, AI Framework & MCP for WordPress | Protected by Atomicorp rules | 330791 , 340128 , 340152 , 344370 , 360152 , 380018 , 390801 |
| CVE-2026-65760 | Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0 | Easy Store extension for Joomla | Protected by Atomicorp rules | 340007 , 344360 , 347009 , 390709 |
| CVE-2020-9043 | WordPress wpCentral <1.5.1 - Information Disclosure | wpcentral | Detected by Atomicorp rules | 377360 |
| CVE-2021-32819 | Nodejs Squirrelly - Remote Code Execution | squirrelly | Protected by Atomicorp rules | 340014 , 340087 , 340095 , 340193 , 344370 , 345240 , 380026 |
| CVE-2026-47394 | PraisonAI vulnerable to unauthenticated arbitrary file read via MCP workflow.show, workflow.validate, deploy.validate | PraisonAI | Protected by Atomicorp rules | 340007 , 344360 , 390709 |
| CVE-2026-47743 | Shopper: Multiple data integrity and disclosure issues in admin Livewire components | shopper | Protected by Atomicorp rules | 333140 , 333141 , 340095 , 340147 , 340148 , 341256 , 342259 , 346755 |
| CVE-2026-62865 | TypeBot: Arbitrary server file read via Send Email block attachment path | typebot.io | Protected by Atomicorp rules | 340007 , 344360 , 390709 |
| CVE-2018-16288 | LG SuperSign EZ CMS 2.5 - Local File Inclusion | supersign cms | Protected by Atomicorp rules | 347009 |
| CVE-2021-32820 | Express-handlebars - Local File Inclusion | express handlebars | Protected by Atomicorp rules | 344360 , 347009 , 390709 |
| CVE-2024-21136 | Oracle Retail Xstore Suite - Pre-authenticated Path Traversal | retail xstore office | Protected by Atomicorp rules | 340007 , 344365 , 347019 |
| CVE-2024-24919 | Check Point Security Gateway Arbitrary File Read | quantum spark firmware | Protected by Atomicorp rules | 344360 , 390709 , 392301 |
| CVE-2026-10055 | Eclipse Theia Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | Eclipse Theia | Protected by Atomicorp rules | 337109 , 337110 , 344360 , 398021 , 398022 |
| CVE-2026-44881 | Portainer: Arbitrary File Read via Git Symlink Injection in Stack Auto-Update | portainer | Protected by Atomicorp rules | 340007 , 344360 , 347009 , 390709 |
| CVE-2025-69755 | Neterbit NW-431F Router vNW-431F-20241014-IR03 Arbitrary Code Execution Vulnerability | - | Protected by Atomicorp rules | 340014 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655 |
| CVE-2026-39363 | Vite Affected by Arbitrary File Read via Vite Dev Server WebSocket | vite | Protected by Atomicorp rules | 340007 , 344360 , 347009 , 390709 |
| CVE-2026-42564 | jotty.page < 1.22.0 - Path Traversal | jotty | Protected by Atomicorp rules | 347009 |
| CVE-2026-53571 | Vite: server.fs.deny bypass on Windows alternate paths | vite | Protected by Atomicorp rules | 340007 , 344360 , 347009 |
| CVE-2016-1337 | Cisco EPC 3928 - Multiple Vulnerabilities | epc3928 firmware | Protected by Atomicorp rules | 333141 , 340147 , 340148 , 340149 , 341256 , 342259 , 344363 , 346755 , 350148 , 390726 , 392301 , 392647 , 392648 |
| CVE-2014-0644 | EMC CTA v10.0 Unauthenticated XXE Arbitrary File Read | cloud tiering appliance software | Protected by Atomicorp rules | 344360 , 344372 , 390724 |
| CVE-2016-9314 | Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 - Multiple Vulnerabilities | interscan web security virtual appliance | Protected by Atomicorp rules | 340147 , 340148 , 341256 , 342259 , 346755 , 350147 , 350148 , 390585 |
| CVE-2016-3473 | Oracle BI Publisher 11.1.1.6.0/11.1.1.7.0/11.1.1.9.0/12.2.1.0.0 - XML External Entity Injection | business intelligence publisher | Protected by Atomicorp rules | 330791 , 340152 , 344370 , 344372 , 380018 , 390704 , 392301 |
| CVE-2024-46987 | Camaleon CMS Directory Traversal CVE-2024-46987 | camaleon cms | Protected by Atomicorp rules | 340007 , 344360 , 347009 , 390709 |
| CVE-2026-53553 | Goploy: Arbitrary File Read via Path Traversal in /deploy/fileDiff allows Remote Server Compromise | goploy | Protected by Atomicorp rules | 340007 , 344360 , 390709 |
| CVE-2014-7863 | ManageEngine Multiple Products Arbitrary File Download | manageengine applications manager | Protected by Atomicorp rules | 340006 , 344360 , 347009 , 390709 |
| CVE-2014-8675 | SO Planning 1.32 - Multiple Vulnerabilities | soplanning | Protected by Atomicorp rules | 331028 , 340016 , 340017 , 340144 , 340155 , 340156 , 340157 , 340159 , 341155 , 341245 , 344363 , 344370 , 360147 , 360148 , 360153 , 390726 , 392647 |
| CVE-2014-9147 | Fiyo CMS 2.0.1.8 - Multiple Vulnerabilities | fiyo cms | Protected by Atomicorp rules | 340007 , 340156 , 341145 , 344360 , 380026 , 380122 , 390709 , 390720 , 390726 , 392647 |
| CVE-2015-1000012 | WordPress MyPixs <=0.3 - Local File Inclusion | mypixs | Protected by Atomicorp rules | 344360 , 347009 , 390709 |
| CVE-2015-2080 | Inductive Automation Ignition 7.8.1 - Remote Leakage Of Shared Buffers | fedora | Protected by Atomicorp rules | 344361 , 344363 , 344364 , 344365 , 390724 |
| CVE-2016-4806 | Web2py 2.14.5 - Multiple Vulnerabilities | web2py | Protected by Atomicorp rules | 344360 , 344364 , 344366 , 344370 |
| CVE-2016-5677 | NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities | readynas surveillance | Protected by Atomicorp rules | 392301 |
| CVE-2017-1000029 | Oracle GlassFish Server Open Source Edition 3.0.1 - Local File Inclusion | glassfish server | Protected by Atomicorp rules | 347009 |
| CVE-2017-16894 | PHP Laravel Framework token Unserialize Remote Command Execution | laravel | Protected by Atomicorp rules | 390709 |
| CVE-2017-5146 | Carlo Gavazzi Energy Meters - Login Brute Force, Extract Info and Dump Plant Database | vmu-c em firmware | Protected by Atomicorp rules | 390716 |
| CVE-2017-9812 | Kaspersky Anti-Virus File Server 8.0.3.297 - Multiple Vulnerabilities | anti-virus for linux server | Protected by Atomicorp rules | 390704 , 390724 |
| CVE-2018-1306 | Apache Portals Pluto 3.0.0 - Remote Code Execution | pluto | Protected by Atomicorp rules | 390727 , 392648 |
| CVE-2018-3760 | Ruby On Rails - Local File Inclusion | cloudforms | Protected by Atomicorp rules | 347009 |
| CVE-2018-6008 | Joomla! Jtag Members Directory 5.3.7 - Local File Inclusion | jtag members directory | Protected by Atomicorp rules | 340007 , 344360 , 347009 , 390709 |
| CVE-2018-8033 | Apache OFBiz - XML External Entity Injection | ofbiz | Protected by Atomicorp rules | 341256 , 344370 , 344372 |
| CVE-2021-24170 | User Profile Picture < 2.5.0 - Sensitive Information Disclosure | user profile picture | Detected by Atomicorp rules | 377360 |
| CVE-2021-24227 | Patreon WordPress <1.7.0 - Unauthenticated Local File Inclusion | patreon wordpress | Protected by Atomicorp rules | 340007 , 344360 , 347009 , 390709 |
| CVE-2021-41277 | Metabase Pre-Auth Local File Inclusion (CVE-2021-41277) | metabase | Protected by Atomicorp rules | 340165 , 344360 , 347009 |
| CVE-2021-43287 | Pre-Auth Takeover of Build Pipelines in GoCD | gocd | Protected by Atomicorp rules | 340007 , 344360 , 347009 , 390709 |
| CVE-2023-34092 | Vite Dev Server - Information Exposure | vite | Protected by Atomicorp rules | 390709 |
| CVE-2023-40211 | Post Grid <= 2.2.50 - Information Exposure via REST API | post grid combo | Protected by Atomicorp rules | 330791 , 340152 |
| CVE-2023-40600 | EWWW Image Optimizer <= 7.2.0 - Unauthenticated Information Disclosure | image optimizer | Protected by Atomicorp rules | 390716 |
| CVE-2023-44982 | WordPress Perfect Images (WP Retina 2x) < 6.4.6 - Sensitive Information Exposure | perfect images | Protected by Atomicorp rules | 390716 |
| CVE-2023-49103 | ownCloud Phpinfo Reader | graph api | Protected by Atomicorp rules | 340035 |
| CVE-2024-12008 | W3 Total Cache < 2.8.2 - Log File Exposure | w3 total cache | Protected by Atomicorp rules | 390716 |
| CVE-2024-45388 | Hoverfly < 1.10.3 - Arbitrary File Read | hoverfly | Protected by Atomicorp rules | 344360 , 390709 |
| CVE-2024-46938 | Sitecore Experience Platform <= 10.4 - Arbitrary File Read | experience commerce | Protected by Atomicorp rules | 340007 , 344360 , 344365 , 347019 , 390709 |
| CVE-2025-30208 | Vite Development Server Arbitrary File Read Bypass (CVE-2025-30208) | vite | Protected by Atomicorp rules | 347009 , 390709 |
| CVE-2025-31125 | Vite Development Server - Path Traversal | vite | Protected by Atomicorp rules | 347009 , 390709 , 390716 |
| CVE-2026-51078 | Dede CMS v.5.7.118 Information Disclosure Vulnerability | - | Protected by Atomicorp rules | 340014 , 340023 , 340029 , 344360 , 344361 , 344363 , 344364 , 344366 , 344370 , 393655 |
| CVE-2026-61891 | theia Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | theia | Protected by Atomicorp rules | 340007 , 344360 , 347009 , 390709 |
| CVE-2025-34098 | Riverbed SteelHead VCX File Read | SteelHead VCX | Protected by Atomicorp rules | 340007 , 344360 , 344370 , 390709 |
| CVE-2026-47735 | Arc has an authenticated arbitrary local-file read via DuckDB I/O functions that bypasses RBAC table-level checks | arc | Protected by Atomicorp rules | 340007 , 344360 , 390709 , 390719 |
| CVE-2024-7339 | TVT DVR Sensitive Device - Information Disclosure | sh-4050a5-5l(mm) firmware | Protected by Atomicorp rules | 392301 |
| CVE-2026-111053 | FOSSBilling: Unauthenticated attacker can probe existence of arbitrary files via guest/system/template_exists | FOSSBilling | Protected by Atomicorp rules | 340007 , 344360 , 347009 , 390709 |
| CVE-2014-2383 | Dompdf < v0.6.0 - Local File Inclusion | dompdf | Protected by Atomicorp rules | 340077 , 340165 , 344360 , 347009 |
| CVE-2015-4682 | Polycom RealPresence Resource Manager < 8.4 - Multiple Vulnerabilities | realpresence resource manager | Protected by Atomicorp rules | 330791 , 340152 , 392301 |
| CVE-2016-6435 | Cisco Firepower Management Console 6.0 Post Auth Report Download Directory Traversal | secure firewall management center | Protected by Atomicorp rules | 340006 , 340007 , 340029 , 344360 , 347009 , 390613 , 390614 , 390709 |
| CVE-2018-18762 | SaltOS Erp Crm 3.1 r8126 - Database File Download | saltos | Protected by Atomicorp rules | 390716 |
| CVE-2018-18778 | ACME mini_httpd Arbitrary File Read (CVE-2018-18778) | mini-httpd | Protected by Atomicorp rules | 347009 , 390709 |
| CVE-2018-7704 | SecurEnvoy SecurMail 9.1.501 - Multiple Vulnerabilities | securmail | Protected by Atomicorp rules | 330791 , 340152 |
| CVE-2021-22145 | Elasticsearch Memory Disclosure | elasticsearch | Protected by Atomicorp rules | 330791 , 340152 |
| CVE-2022-34125 | GLPI Activity v3.1.0 - Authenticated Local File Inclusion on Activity plugin | cmdb | Protected by Atomicorp rules | 340007 , 344360 |
| CVE-2026-114623 | baserCMS: Path traversal in the BcThemeFile admin screen allows file disclosure | basercms | Protected by Atomicorp rules | 344360 , 347009 |
| CVE-2026-58442 | Repository migration SSRF via multi-answer DNS allow-list bypass | Gitea Open Source Git Server | Protected by Atomicorp rules | 337109 , 337110 , 340162 , 340163 , 344360 , 398021 , 398022 |
| CVE-2026-63432 | Horilla: Server-Side Template Injection (SSTI) in Mail Preview Endpoints Allows Authenticated Users to Disclose Password | horilla-hr | Protected by Atomicorp rules | 340014 , 344361 , 344363 , 344364 , 344366 , 344370 |
| CVE-2026-7542 | Slider Revolution 7.0 - 7.0.10 - Authenticated (Subscriber+) Sensitive Information Disclosure | Slider Revolution | Protected by Atomicorp rules | 340007 , 344360 , 347009 , 390709 |
| CVE-2026-78851 | Grav CMS 2.0.3 through 2.0.6 Path Traversal Vulnerability | Grav CMS 2.0.3 through 2.0.6 | Protected by Atomicorp rules | 340007 , 344360 , 347009 , 390709 |
| CVE-2026-112947 | Vite: First 4 bytes of files outside of server.fs setting is exposed by ?vite-wasm-instance | vite | Protected by Atomicorp rules | 340007 , 344360 , 347009 , 390709 |
| CVE-2026-29066 | TinaCMS - Path Traversal | tinacms | Protected by Atomicorp rules | 347009 , 390709 |
| CVE-2017-14955 | Check_MK 1.2.8p25 - Information Disclosure | checkmk | Protected by Atomicorp rules | 330791 , 340152 |
| CVE-2024-13609 | WordPress 1 Click Migration Plugin < 2.3 - Information Exposure | 1 click migration | Protected by Atomicorp rules | 350590 , 390716 |
| CVE-2025-13439 | Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Information Disclosure and PHAR Deserializatio | Fancy Product Designer | Protected by Atomicorp rules | 340014 , 340023 , 340193 , 344362 , 344363 , 344365 , 344370 , 344380 , 344382 , 344385 , 390613 , 390722 |
| CVE-2018-1612 | IBM QRadar SIEM Unauthenticated Remote Code Execution | qradar security information and event manager | Protected by Atomicorp rules | 330791 , 340152 |
| CVE-2025-14528 | D-Link DIR-803 - Authentication Bypass | dir-803 firmware | Protected by Atomicorp rules | 390722 |
| CVE-2026-112027 | light0011 cms Uploadify check-exists.php file_exists file information disclosure | cms | Protected by Atomicorp rules | 344360 , 390709 |
| CVE-2018-8024 | Apache Spark UI - Cross-Site Scripting | spark | Protected by Atomicorp rules | 340147 , 340148 , 341266 , 342259 , 346755 , 350147 , 350148 |
| CVE-2026-47132 | phpMyFAQ: SQL LIKE Wildcard Injection in Chat User Search Allows Authenticated User Enumeration | phpMyFAQ | Protected by Atomicorp rules | 340016 , 340017 , 340144 , 340145 , 340156 , 340157 , 341245 , 360147 , 360148 , 380026 , 380122 , 390572 |
| CVE-2013-2683 | Cisco Linksys E4200 - Multiple Vulnerabilities | linksys e4200 firmware | Protected by Atomicorp rules | 392301 |
| CVE-2015-2826 | WordPress Plugin Simple Ads Manager - Information Disclosure | simple ads manager | Protected by Atomicorp rules | 344370 , 390904 |
| CVE-2016-1910 | SAP NetWeaver J2EE Engine 7.40 - SQL Injection | netweaver | Protected by Atomicorp rules | 340016 , 340156 , 341245 , 380026 , 390704 |
| CVE-2016-2388 | SAP NetWeaver J2EE Engine 7.40 - SQL Injection | netweaver application server java | Protected by Atomicorp rules | 340016 , 340156 , 341245 , 380026 , 390704 |
| CVE-2017-9978 | QuantaStor Software Defined Storage < 4.3.1 - Multiple Vulnerabilities | quantastor | Protected by Atomicorp rules | 330791 , 340152 , 392301 |
| CVE-2021-34429 | Eclipse Jetty 11.0.5 - Sensitive File Disclosure | jetty | Protected by Atomicorp rules | 390703 |
| CVE-2024-8852 | All-in-One WP Migration < 7.87 - Unauthenticated Information Disclosure | all-in-one wp migration | Protected by Atomicorp rules | 390716 |
| CVE-2025-11368 | LearnPress < 4.3.0 - Arbitrary Callback Execution to Information Exposure | learnpress | Protected by Atomicorp rules | 344365 |
| CVE-2025-31486 | Vite server.fs.deny Bypass - Local File Inclusion | vite | Protected by Atomicorp rules | 347009 , 390709 |
| CVE-2026-53452 | Ground Station: Unauthenticated out-of-containment file read via sigmfplayback recordingPath | ground-station | Protected by Atomicorp rules | 340007 , 344360 , 390709 |
| CVE-2026-73082 | Activepieces: Server-side request forgery in MCP tool validation endpoint | activepieces | Protected by Atomicorp rules | 337109 , 337110 , 344360 , 398021 , 398022 |
| CVE-2026-8385 | WordPress WP Go Maps < 10.0.10 - Unauthenticated Marker Data Disclosure | wp-google-maps | Protected by Atomicorp rules | 344365 |
| CVE-2009-0815 | Typo3 sa-2009-002 File Disclosure | typo3 | Protected by Atomicorp rules | 344360 |
| CVE-2010-2333 | LiteSpeed Source Code Disclosure/Download | litespeed web server | Protected by Atomicorp rules | 344365 |
| CVE-2011-3011 | CA Arcserve D2D GWT RPC Credential Information Disclosure | arcserve d2d | Protected by Atomicorp rules | 391213 |
| CVE-2011-4898 | WordPress Core 3.3.1 - Multiple Vulnerabilities | WordPress | Protected by Atomicorp rules | 340147 , 340148 , 344370 , 346755 , 381209 , 381210 , 390727 , 392301 , 392648 |
| CVE-2013-4826 | HP Intelligent Management SOM FileDownloadServlet Arbitrary Download | imc service operation management software module | Protected by Atomicorp rules | 340007 , 344360 , 347009 , 390709 |
| CVE-2013-6043 | Webuzo 2.1.3 - Multiple Vulnerabilities | webuzo | Protected by Atomicorp rules | 333140 , 333141 , 340149 , 342259 , 344360 , 344361 , 344363 , 344370 , 346755 , 350148 , 390726 , 392647 |
| CVE-2015-0922 | McAfee ePolicy Orchestrator Authenticated XXE Credentials Exposure | epolicy orchestrator | Protected by Atomicorp rules | 341256 , 344360 , 344370 , 344372 , 347009 , 350147 , 380018 |
| CVE-2015-2997 | SysAid Help Desk Arbitrary File Download | sysaid | Protected by Atomicorp rules | 340007 , 344360 , 347009 , 390709 |
| CVE-2005-3398 | HTTP Cross-Site Tracing Detection | solaris | Protected by Atomicorp rules | 340002 , 341266 |
| CVE-2007-3385 | Apache Tomcat 6.0.15 - Cookie Quote Handling Remote Information Disclosure | tomcat | Protected by Atomicorp rules | 390727 , 392301 , 392648 |
| CVE-2014-0871 | IBM Algorithmics RICOS 4.5.0 < 4.7.0 - Multiple Vulnerabilities | algo credit limits | Protected by Atomicorp rules | 392301 |
| CVE-2020-12027 | Rockwell FactoryTalk View SE SCADA Unauthenticated Remote Code Execution | factorytalk view | Protected by Atomicorp rules | 390716 |
| CVE-2023-39999 | WordPress < 6.3.2 is vulnerable to Broken Access Control | WordPress | Protected by Atomicorp rules | 333140 |
| CVE-2011-3829 | Support Incident Tracker Remote Command Execution | support incident tracker | Protected by Atomicorp rules | 334168 , 340128 , 360152 , 380018 , 390501 , 390801 , 391213 |
| CVE-2014-0894 | IBM Algorithmics RICOS 4.5.0 < 4.7.0 - Multiple Vulnerabilities | algo credit limits | Protected by Atomicorp rules | 392301 |
| CVE-2026-108811 | WMCMS index.php information disclosure | WMCMS | Protected by Atomicorp rules | 344360 , 347009 |
Associated Atomicorp WAF Rules
| Rule | Status | Behavior |
|---|---|---|
| 312863 | Active | disruptive (deny) |
| 330791 | Active | disruptive (deny) |
| 331028 | Active | disruptive (deny) |
| 333140 | Active | disruptive (deny) |
| 333141 | Active | disruptive (deny) |
| 334168 | Active | disruptive (deny) |
| 337109 | Active | disruptive (deny) |
| 337110 | Active | disruptive (deny) |
| 340002 | Active | disruptive (deny) |
| 340006 | Active | disruptive (deny) |
| 340007 | Active | disruptive (deny) |
| 340014 | Active | disruptive (deny) |
| 340016 | Active | disruptive (deny) |
| 340017 | Active | disruptive (deny) |
| 340023 | Active | disruptive (deny) |
| 340029 | Active | disruptive (deny) |
| 340035 | Active | disruptive (deny) |
| 340077 | Active | disruptive (deny) |
| 340087 | Active | disruptive (deny) |
| 340095 | Active | disruptive (deny) |
| 340128 | Active | disruptive (deny) |
| 340144 | Active | disruptive (deny) |
| 340145 | Active | disruptive (deny) |
| 340147 | Active | disruptive (deny) |
| 340148 | Active | disruptive (deny) |
| 340149 | Active | disruptive (deny) |
| 340152 | Active | disruptive (deny) |
| 340155 | Active | disruptive (deny) |
| 340156 | Active | disruptive (deny) |
| 340157 | Active | disruptive (deny) |
| 340159 | Active | disruptive (deny) |
| 340162 | Active | disruptive (deny) |
| 340163 | Active | disruptive (deny) |
| 340165 | Active | disruptive (deny) |
| 340193 | Active | disruptive (deny) |
| 341145 | Active | disruptive (deny) |
| 341155 | Active | disruptive (deny) |
| 341245 | Active | disruptive (deny) |
| 341256 | Active | disruptive (deny) |
| 341266 | Active | disruptive (deny) |
| 342259 | Active | disruptive (deny) |
| 344360 | Active | disruptive (deny) |
| 344361 | Active | disruptive (deny) |
| 344362 | Active | disruptive (deny) |
| 344363 | Active | disruptive (deny) |
| 344364 | Active | disruptive (deny) |
| 344365 | Active | disruptive (deny) |
| 344366 | Active | disruptive (deny) |
| 344370 | Active | disruptive (deny) |
| 344372 | Active | disruptive (deny) |
| 344380 | Active | disruptive (deny) |
| 344382 | Active | disruptive (deny) |
| 344385 | Active | disruptive (deny) |
| 345240 | Active | disruptive (deny) |
| 346755 | Active | disruptive (deny) |
| 347009 | Active | disruptive (deny) |
| 347019 | Active | disruptive (deny) |
| 350147 | Active | disruptive (deny) |
| 350148 | Active | disruptive (deny) |
| 350590 | Active | disruptive (deny) |
| 360147 | Active | disruptive (deny) |
| 360148 | Active | disruptive (deny) |
| 360152 | Active | disruptive (deny) |
| 360153 | Active | disruptive (deny) |
| 377360 | Active | non-disruptive (pass) |
| 380018 | Active | disruptive (deny) |
| 380026 | Active | disruptive (deny) |
| 380122 | Active | disruptive (deny) |
| 381209 | Active | disruptive (deny) |
| 381210 | Active | disruptive (deny) |
| 390501 | Active | disruptive (deny) |
| 390572 | Active | disruptive (deny) |
| 390585 | Active | disruptive (deny) |
| 390613 | Active | disruptive (deny) |
| 390614 | Active | disruptive (deny) |
| 390703 | Active | disruptive (deny) |
| 390704 | Active | disruptive (deny) |
| 390709 | Active | disruptive (deny) |
| 390716 | Active | disruptive (deny) |
| 390719 | Active | disruptive (deny) |
| 390720 | Active | disruptive (deny) |
| 390722 | Active | disruptive (deny) |
| 390724 | Active | disruptive (deny) |
| 390726 | Active | disruptive (deny) |
| 390727 | Active | disruptive (deny) |
| 390801 | Active | disruptive (deny) |
| 390904 | Active | disruptive (deny) |
| 391213 | Active | disruptive (deny) |
| 392301 | Active | disruptive (deny) |
| 392647 | Active | disruptive (deny) |
| 392648 | Active | disruptive (deny) |
| 393655 | Active | disruptive (deny) |
| 398021 | Active | disruptive (deny) |
| 398022 | Active | disruptive (deny) |
Related MITRE CAPEC Context
MITRE associates this CWE with the following attack-pattern entries. These taxonomy relationships are context, not Atomicorp coverage claims:
CAPEC-116 (opens in a new tab) , CAPEC-13 (opens in a new tab) , CAPEC-169 (opens in a new tab) , CAPEC-22 (opens in a new tab) , CAPEC-224 (opens in a new tab) , CAPEC-285 (opens in a new tab) , CAPEC-287 (opens in a new tab) , CAPEC-290 (opens in a new tab) , CAPEC-291 (opens in a new tab) , CAPEC-292 (opens in a new tab) , CAPEC-293 (opens in a new tab) , CAPEC-294 (opens in a new tab) , CAPEC-295 (opens in a new tab) , CAPEC-296 (opens in a new tab) , CAPEC-297 (opens in a new tab) , CAPEC-298 (opens in a new tab) , CAPEC-299 (opens in a new tab) , CAPEC-300 (opens in a new tab) , CAPEC-301 (opens in a new tab) , CAPEC-302 (opens in a new tab) , CAPEC-303 (opens in a new tab) , CAPEC-304 (opens in a new tab) , CAPEC-305 (opens in a new tab) , CAPEC-306 (opens in a new tab) , CAPEC-307 (opens in a new tab) , CAPEC-308 (opens in a new tab) , CAPEC-309 (opens in a new tab) , CAPEC-310 (opens in a new tab) , CAPEC-312 (opens in a new tab) , CAPEC-313 (opens in a new tab) , CAPEC-317 (opens in a new tab) , CAPEC-318 (opens in a new tab) , CAPEC-319 (opens in a new tab) , CAPEC-320 (opens in a new tab) , CAPEC-321 (opens in a new tab) , CAPEC-322 (opens in a new tab) , CAPEC-323 (opens in a new tab) , CAPEC-324 (opens in a new tab) , CAPEC-325 (opens in a new tab) , CAPEC-326 (opens in a new tab) , CAPEC-327 (opens in a new tab) , CAPEC-328 (opens in a new tab) , CAPEC-329 (opens in a new tab) , CAPEC-330 (opens in a new tab) , CAPEC-472 (opens in a new tab) , CAPEC-497 (opens in a new tab) , CAPEC-508 (opens in a new tab) , CAPEC-573 (opens in a new tab) , CAPEC-574 (opens in a new tab) , CAPEC-575 (opens in a new tab) , CAPEC-576 (opens in a new tab) , CAPEC-577 (opens in a new tab) , CAPEC-59 (opens in a new tab) , CAPEC-60 (opens in a new tab) , CAPEC-616 (opens in a new tab) , CAPEC-643 (opens in a new tab) , CAPEC-646 (opens in a new tab) , CAPEC-651 (opens in a new tab) , CAPEC-79 (opens in a new tab)