CWE-203
Observable Discrepancy
The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.
We have discovered 4,496 live websites that are affected by CWE-203.
CVEs
- Count - 12
CWE References
Website Distribution by Country
Number of websites using CWE-203 United States | 1,258 websites |
 Canada | 464 websites |
 Germany | 397 websites |
 France | 279 websites |
 Denmark | 206 websites |
 Spain | 190 websites |
 Italy | 164 websites |
 Argentina | 155 websites |
 GB | 151 websites |
 Netherlands | 98 websites |
Website Distribution by TLD
Number of websites using CWE-203| .com | 1,668 websites |
| .de | 239 websites |
| .org | 231 websites |
| .ca | 222 websites |
| .it | 181 websites |
| .net | 125 websites |
| .es | 102 websites |
| .co.uk | 100 websites |
| .nl | 95 websites |
| .se | 71 websites |
Newest CVEs
List of the most recent CVEs that are part of CWE-203| Discovered | CVE | Description | Websites |
|---|---|---|---|
| May, 2026 | CVE-2026-44263 | Weblate: Private Translation Enumeration via Screenshot API | 81 |
| Mar, 2026 | CVE-2026-33425 | Discourse has inferable private group membership or existence via exclude_groups parameter | 351 |
| Mar, 2026 | CVE-2026-21386 | Private channel enumeration via /mute slash command | 100 |
| Aug, 2025 | CVE-2025-43751 | User enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2024.Q4.0 ... | 60 |
| Aug, 2025 | CVE-2025-43739 | Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.6, 2024.Q4.0 throu... | 60 |
| Aug, 2025 | CVE-2025-43743 | Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 throu... | 60 |
| Jul, 2025 | CVE-2025-4302 | Stop User Enumeration < 1.7.3 - Protection Bypass | 3,354 |
| Jul, 2025 | CVE-2025-24391 | Possible user enumeration | 1 |
| Feb, 2024 | CVE-2024-26268 | User enumeration vulnerability in Liferay Portal 7.2.0 through 7.4.3.26, and older unsupported versi... | 567 |
| Sep, 2022 | CVE-2022-36105 | User Enumeration via Response Timing in TYPO3 | 26 |
The most widespread CVEs
List of the most common CVEs that are part of CWE-203| Discovered | CVE | Description | Websites |
|---|---|---|---|
| Jul, 2025 | CVE-2025-4302 | Stop User Enumeration < 1.7.3 - Protection Bypass | 3,354 |
| Feb, 2024 | CVE-2024-26268 | User enumeration vulnerability in Liferay Portal 7.2.0 through 7.4.3.26, and older unsupported versi... | 567 |
| Mar, 2026 | CVE-2026-33425 | Discourse has inferable private group membership or existence via exclude_groups parameter | 351 |
| Mar, 2026 | CVE-2026-21386 | Private channel enumeration via /mute slash command | 100 |
| May, 2026 | CVE-2026-44263 | Weblate: Private Translation Enumeration via Screenshot API | 81 |
| Aug, 2025 | CVE-2025-43739 | Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.6, 2024.Q4.0 throu... | 60 |
| Aug, 2025 | CVE-2025-43743 | Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 throu... | 60 |
| Aug, 2025 | CVE-2025-43751 | User enumeration vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2024.Q4.0 ... | 60 |
| Sep, 2022 | CVE-2022-36105 | User Enumeration via Response Timing in TYPO3 | 26 |
| Apr, 2021 | CVE-2021-29443 | Padding Oracle Attack due to Observable Timing Discrepancy in jose | 1 |
Websites affected by CWE-203
Top websites that are affected by CWE-203. Please click on the "Contact us" link to get more information.| Domain | Country | Rank | Contacts |
|---|---|---|---|
| *****.com | United States | *,*** | |
| *******.cz |  Czech Republic | *,*** | |
| ******.com | United States | **,*** | |
| ********************.com | United States | **,*** | |
| ************.io | United States | **,*** | |
| *****.**.gov | United States | **,*** | |
| ***************.com | United States | **,*** | |
| ***********.com | United States | **,*** | |
| *********.com | United States | **,*** | |
| *****************.***.it | Italy | **,*** |