Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-200
Weakness type CWE-200 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 1609 | 1510 | 18 |
Monthly trend
▅▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▅▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▁▅▁▁▁▁▁▁▁▁▁▁▅▁▁▁▁▁▁▅▁▁▅▁▅█▁▁▅▅▁▁█▁▁▁▁▁▅▁▁▁▁▁▅▁▁▁▁▁▁▅▁▁▁▁▁▁▅▁▁▁▅▁▁▁▁▁▁▁▁▁▁
2019-02 0 · 2019-03 1 · 2019-04 0 · 2019-05 0 · 2019-06 0 · 2019-07 0 · 2019-08 0 · 2019-09 0 · 2019-10 0 · 2019-11 0 · 2019-12 0 · 2020-01 0
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2024-24919 | 8.6 | 100.0 | KEV | Information disclosure |
| CVE-2021-41277 | 7.5 | 99.9 | KEV | GeoJSON URL validation can expose server files and environment variables to unauthorize… |
| CVE-2016-6415 | 7.5 | 99.8 | KEV | Cisco IOS, IOS XR, and IOS XE |
| CVE-2023-28432 | 7.5 | 99.7 | KEV | Minio Information Disclosure in Cluster Deployment |
| CVE-2023-49103 | 10.0 | 99.6 | KEV | ownCloud ownCloud graphapi |
| CVE-2020-3259 | 7.5 | 99.4 | KEV | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Se… |
| CVE-2025-31125 | 5.3 | 99.2 | KEV | Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query |
| CVE-2016-2388 | 5.3 | 99.0 | KEV | SAP NetWeaver |
| CVE-2018-5430 | 7.7 | 98.8 | KEV | TIBCO JasperReports Server Information Disclosure Vulnerability |
| CVE-2008-0655 | 8.8 | 98.5 | KEV | Adobe Acrobat and Reader |
| CVE-2026-20133 | 6.5 | 98.3 | KEV | Cisco Catalyst SD-WAN Manager |
| CVE-2025-68686 | 5.9 | 98.2 | KEV | Fortinet FortiOS |
| CVE-2015-5317 | 7.5 | 97.7 | KEV | Jenkins Jenkins User Interface (UI) |
| CVE-2015-0310 | 7.8 | 96.7 | KEV | Adobe Flash Player |
| CVE-2022-20821 | 6.5 | 96.0 | KEV | Cisco IOS XR Software Health Check Open Port Vulnerability |
| CVE-2026-20805 | 5.5 | 94.4 | KEV | Desktop Window Manager Information Disclosure Vulnerability |
| CVE-2021-25369 | 6.2 | 64.5 | KEV | Samsung Mobile Devices |
| CVE-2023-21237 | 6.2 | 17.2 | KEV | Android Pixel |
| CVE-2017-12616 | 7.5 | 99.4 | — | — |
| CVE-2020-17527 | 7.5 | 97.9 | — | Apache Tomcat: Request header mix-up between HTTP/2 streams |
