Skip to main content

CWE-615

Inclusion of Sensitive Information in Source Code Comments

3 CVEs Avg CVSS 5.4 MITRE
0
CRITICAL
1
HIGH
2
MEDIUM
0
LOW
1
POC
0
KEV

Monthly

CVE-2026-3158 Jul 28, 20:17 MEDIUM This Month

Information disclosure in the dashboard component of IBM Sterling B2B Integrator and File Gateway 6.2.x allows low‑privileged authenticated users to view sensitive details embedded in source code comments. No active exploitation or public proof‑of‑concept code is known at this time; the advisory carries a CVSS base score of 4.3 and is categorized as low severity.

Information Disclosure IBM Sterling B2b Integrator Sterling File Gateway
NVD
CVSS 3.1
4.3
EPSS
0.2%
CVE-2026-3157 Jul 28, 20:17 MEDIUM This Month

Information disclosure in IBM Sterling B2B Integrator and Sterling File Gateway 6.2.x allows authenticated remote attackers to view sensitive data embedded in source code comments of a mailbox component. Affected versions include 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1. No public exploit or active exploitation has been reported.

Information Disclosure IBM Sterling B2b Integrator Sterling File Gateway
NVD
CVSS 3.1
4.3
EPSS
0.2%
CVE-2024-52298 Nov 13, 16:15 HIGH POC This Week

macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Mozilla Xwiki Pdf Viewer Macro
NVD GitHub
CVSS 3.1
7.5
EPSS
0.7%
EPSS 0% CVSS 4.3
MEDIUM This Month

Information disclosure in the dashboard component of IBM Sterling B2B Integrator and File Gateway 6.2.x allows low‑privileged authenticated users to view sensitive details embedded in source code comments. No active exploitation or public proof‑of‑concept code is known at this time; the advisory carries a CVSS base score of 4.3 and is categorized as low severity.

Information Disclosure IBM Sterling B2b Integrator +1
NVD
EPSS 0% CVSS 4.3
MEDIUM This Month

Information disclosure in IBM Sterling B2B Integrator and Sterling File Gateway 6.2.x allows authenticated remote attackers to view sensitive data embedded in source code comments of a mailbox component. Affected versions include 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1. No public exploit or active exploitation has been reported.

Information Disclosure IBM Sterling B2b Integrator +1
NVD
EPSS 1% CVSS 7.5
HIGH POC This Week

macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Mozilla Xwiki +1
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy