CWE-223— Omission of Security-relevant Information

The product does not record or display information that would be important for identifying the source or nature of an attack, or determining if an action is safe.— MITRE CWE catalog

7 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-223page 1 of 1

CVE-2022-22563MEDIUMCVSS 4.4EG 4.4
2022-04-08
Dell EMC Powerscale OneFS 8.2.x - 9.2.x omit security-relevant information in /etc/master.passwd. A high-privileged user can exploit this vulnerability to not record information identifying the source of account information changes.
CVE-2022-44646LOWCVSS 2.2EG 5.3
2022-11-03
In JetBrains TeamCity version before 2022.10, no audit items were added upon editing a user's settings
CVE-2023-28360MEDIUMCVSS 4.3EG 4.3
2023-05-11
An omission of security-relevant information vulnerability exists in Brave desktop prior to version 1.48.171 when a user was saving a file there was no download safety check dialog presented to the user.
CVE-2023-29156MEDIUMCVSS 4.7EG 4.7
2023-07-11
DroneScout ds230 Remote ID receiver from BlueMark Innovations is affected by an information loss vulnerability through traffic injection. An attacker can exploit this vulnerability by injecting, at the right times, spoofed Open Drone ID …
CVE-2023-31191CRITICALCVSS 9.3EG 9.3
2023-07-11
DroneScout ds230 Remote ID receiver from BlueMark Innovations is affected by an information loss vulnerability through traffic injection. An attacker can exploit this vulnerability by injecting, on carefully selected channels, high power …
CVE-2024-52813MEDIUMCVSS 4.3EG 4.3
2025-01-07
matrix-rust-sdk is an implementation of a Matrix client-server library in Rust. Versions of the matrix-sdk-crypto Rust crate before 0.8.0 lack a dedicated mechanism to notify that a user's cryptographic identity has changed from a verified…
CVE-2025-52926LOWCVSS 2.7EG 2.7
2025-06-23
In scan.rs in spytrap-adb before 0.3.5, matches for known stalkerware are not rendered in the interactive user interface.

Map vulnerabilities like CWE-223 to your infrastructure

EchelonGraph correlates every CVE — across CWE-223 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Start Free Scan →