Base weakness
Incomplete
CWE-204: Observable Response Discrepancy
The product provides different responses to incoming requests in a way that reveals internal state information to an unauthorized actor outside of the intended control sphere.
Last updated
146
Recorded CVEs
With this primary weakness
0
KEVs
In the CISA KEV catalog
Not rated
Likelihood of exploit
Per MITRE
Base
Abstraction
MITRE classification
Overview
CWE-204 (Observable Response Discrepancy) is a base-level software weakness catalogued by MITRE in the Common Weakness Enumeration (CWE). It describes a recurring type of mistake that can lead to exploitable security vulnerabilities.
Real-world CVEs
146 recorded CVEs are caused by CWE-204 (Observable Response Discrepancy). The highest-severity and most recent are shown first. 37 new CWE-204 CVEs have been recorded so far in 2026 (51 in 2025).