CWE-548: CWE-548
Yearly Trend
Top Affected Vendors
All CWE-548 CVEs (15)
Grandstream GXP1628 IP phones with firmware version 1.0.4.130 or earlier have directory listing enabled by default, allowing attackers to browse sensi...
Jul 29, 2025CVE-2022-50788 is an information disclosure vulnerability in SOUND4 IMPACT/FIRST/PULSE/Eco systems that allows unauthenticated attackers to access sen...
Dec 30, 2025OpenBMCS 2.4 contains an unauthenticated directory listing vulnerability that allows attackers to browse sensitive directories and access configuratio...
Dec 9, 2025Unauthenticated directory listing vulnerability in Elspec G5 digital fault recorder web interface allows attackers to enumerate system directories wit...
Mar 20, 2024CVE-2021-27505 is an information disclosure vulnerability in mySCADA myPRO software where unauthorized users can access sensitive directory listings. ...
May 13, 2022This critical vulnerability in Blood Bank Management System 1.0 allows remote attackers to access directory listings of the /upload/ folder, potential...
Mar 6, 2025This vulnerability in SourceCodester Farm Management System 1.0 allows attackers to remotely view directory listings, potentially exposing sensitive f...
Nov 15, 2025An error-handling vulnerability in Moodle's router component (r.php) can expose internal directory listings when specific HTTP headers are misconfigur...
Oct 23, 2025IBM Content Navigator versions 3.0.11 through 3.2.0 expose directory listings when accessing specific application URLs, allowing attackers to view fil...
Oct 14, 2025This vulnerability affects Apache httpd webservers running the MEAC300-FNADE4 web application with unnecessary modules enabled. It allows directory li...
Jul 3, 2025This vulnerability in SourceCodester Online Eyewear Shop 1.0 allows attackers to view directory listings in the /oews/admin/ path and subdirectories r...
Mar 23, 2025This vulnerability in IBM Sterling File Gateway allows authenticated users to access sensitive installation directory information. Attackers could use...
Jul 8, 2025IBM InfoSphere Information Server 11.7 contains an information disclosure vulnerability where authenticated users can access directory listings that r...
May 15, 2025IBM Control Center versions 6.2.1 and 6.3.1 contain an information disclosure vulnerability where authenticated users can access sensitive information...
Jan 25, 2025IBM QRadar SIEM versions 7.5 through 7.5.0 UP14 IF01 have an information disclosure vulnerability that exposes directory information. This could allow...
Dec 9, 2025About CWE-548 (CWE-548)
Our database tracks 15 CVEs classified as CWE-548, with 0 rated critical and 6 rated high severity. The average CVSS score for CWE-548 vulnerabilities is 5.8.
External reference: View CWE-548 on MITRE CWE →
Monitor CWE-548 Vulnerabilities
Get alerted when new CWE-548 CVEs affect your infrastructure.
Start Monitoring Free