Threats Tagged 'cwe-203'
View all threats tagged with 'cwe-203'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cwe-203'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-59502: CWE-203: Observable Discrepancy in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions)CVE-2026-59502 0 CWE-203: Observable Discrepancy Join the discussion | CVE Database V5 | 08/13/2026, 09:27:45 UTC Added: 08/13/2026, 09:56:50 UTC |
CVE-2025-13736: CWE-203: Information Disclosure Through Error Messages in WSO2 WSO2 Identity Server as Key ManagerCVE-2025-13736 0 When Multi-Attribute Login is enabled, the login interface fails to consistently mask the existence of user accounts. For valid users, the server resolves and displays their canonical username, while for non-existent users, it echoes the original input. This occurs regardless of the validate_username configuration. The discovery of valid usernames can increase the risk of brute force attacks, social engineering attacks, and targeted information leakage. Attackers can leverage this information to craft more effective phishing campaigns or social engineering tactics to compromise user accounts or extract sensitive data. Join the discussion | CVE Database V5 | 08/06/2026, 07:33:03 UTC Added: 08/06/2026, 08:11:46 UTC |
CVE-2026-59640: CWE-203 Observable Discrepancy in Legion of the Bouncy Castle Inc. BC-JAVACVE-2026-59640 0 CVE-2026-59640 is a high-severity vulnerability in Bouncy Castle for Java (BC-JAVA) involving an OpenPGP CFB quick-check oracle on symmetric/session-key paths. This affects versions before 1.85, versions from 2.73.0 up to but not including 2.73.12, and certain FIPS series versions. The vulnerability is categorized under CWE-203 (Observable Discrepancy). No official patch or remediation level has been confirmed yet. Join the discussion | CVE Database V5 | 08/03/2026, 00:55:19 UTC Added: 08/03/2026, 01:03:45 UTC |
Showing 1 to 3 of 3 results