Exposure DB
1,048 exposure sites - every place a customer-controlled credential or secret can leak - each mapped to the edge it emits, its collection recipe, and what leaks.
406
aws
377
azure
265
gcp
563
critical severity
250
medium severity
233
high severity
2
low severity
Synapse notebook.properties.{cells,metadata,bigDataPool,sessionProperties} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, source_code_secret, sensitive_data, pii, customer_data
Synapse pipeline.properties.{parameters,variables,activities} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, source_code_secret
Synapse pipeline activity run.{input,output,error} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
Microsoft.Synapse/workspaces.tags.* - leaks credential, api_key, sensitive_data, pii
Synapse Spark job definition properties.{jobProperties,targetBigDataPool,files,arguments} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, source_code_secret
Synapse SQL result-set cells - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
Microsoft.Compute/virtualMachines.properties.osProfile.adminPassword - leaks credential, password
Microsoft.Compute/virtualMachines/retrieveBootDiagnosticsData.serialConsoleLogBlobUri - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
Microsoft.Compute/virtualMachines/extensions.properties.protectedSettings - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string
Microsoft.Compute/virtualMachines/extensions.properties.settings - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, source_code_secret
Microsoft.Compute/virtualMachines.properties.osProfile.customData - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, source_code_secret
Microsoft.Compute/virtualMachines.tags.* - leaks credential, api_key, sensitive_data, pii
Microsoft.Compute/virtualMachines/runCommands.properties.instanceView.{output,error,executionMessage} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
Microsoft.Compute/virtualMachines/runCommands.properties.{protectedParameters,runAsPassword} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string
Microsoft.Compute/virtualMachines/runCommands.properties.{source.script,parameters,outputBlobUri,errorBlobUri} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, source_code_secret
Microsoft.Compute/virtualMachines.properties.userData - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, source_code_secret
Microsoft.Compute/virtualMachineScaleSets.properties.virtualMachineProfile.extensionProfile.extensions[].properties.protectedSettings - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string
Microsoft.Compute/virtualMachineScaleSets.properties.virtualMachineProfile.extensionProfile.extensions[].properties.settings - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, source_code_secret
Microsoft.Compute/virtualMachineScaleSets/virtualMachines.instanceView.extensions[].statuses[].message - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, sensitive_data, pii, customer_data
Microsoft.Compute/virtualMachineScaleSets.properties.virtualMachineProfile.osProfile.adminPassword - leaks credential, password
Microsoft.Compute/virtualMachineScaleSets.properties.virtualMachineProfile.osProfile.customData - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, source_code_secret
Microsoft.Compute/virtualMachineScaleSets.properties.virtualMachineProfile.userData - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string, source_code_secret
Microsoft.Compute/virtualMachineScaleSets.tags.* - leaks credential, api_key, sensitive_data, pii
Microsoft.Network/routeTables/routes.properties.{addressPrefix,nextHopIpAddress} and tags - leaks sensitive_data
Microsoft.Network/virtualNetworks/virtualNetworkPeerings.properties.{remoteVirtualNetwork,remoteAddressSpace,remoteVirtualNetworkAddressSpace} - leaks sensitive_data
Microsoft.Network/virtualNetworks/subnets.properties.{serviceEndpoints,serviceEndpointPolicies,delegations,ipAllocations} - leaks sensitive_data
Microsoft.Network/virtualNetworks.tags.* - leaks credential, api_key, sensitive_data, pii
Microsoft.Network/expressRouteCircuits/authorizations.properties.authorizationKey - leaks credential, access_key
Microsoft.Network/connections/sharedkey response.value - leaks credential, password, signing_secret
Virtual WAN/VPN Gateway packet capture output blob - leaks credential, sensitive_data, pii, customer_data
Microsoft.Network/virtualWans.tags.* - leaks credential, api_key, sensitive_data, pii
Microsoft.Network/vpnGateways/vpnConnections/sharedkey response.value - leaks credential, password, signing_secret
Microsoft.Network/vpnSites.properties.{addressSpace,deviceProperties,siteKey,vpnSiteLinks} - leaks sensitive_data
accesscontextmanager.accessPolicies.accessLevels.get.{basic.conditions[],custom.expr.{expression,title,description}} - leaks pii, sensitive_data
accesscontextmanager.accessPolicies.get.title - leaks credential, api_key, sensitive_data, pii
accesscontextmanager.accessPolicies.servicePerimeters.get.{status,spec}.{resources[],accessLevels[],ingressPolicies[],egressPolicies[]} - leaks pii, sensitive_data
appengine.apps.create/appengine.apps.patch.request.iap.oauth2ClientSecret - leaks oauth_token, secret_key, credential
appengine.apps.authorizedCertificates.create/appengine.apps.authorizedCertificates.patch.request.certificateRawData.privateKey - leaks private_key, credential
appengine.apps.services.versions.get.betaSettings.<value> - leaks credential, password, api_key, oauth_token, private_key, connection_string, sensitive_data
appengine.apps.services.versions.get.deployment.files.<value>.sourceUrl -> Cloud Storage object bytes - leaks source_code_secret, credential, password, api_key, private_key
appengine.apps.services.versions.get.envVariables.<value> - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string
artifactregistry.projects.locations.repositories.files.download.HTTP response body - leaks source_code_secret, credential, private_key, customer_data
artifactregistry.projects.locations.repositories.packages.get.annotations.<value> - leaks credential, api_key, sensitive_data, pii
artifactregistry.projects.locations.repositories.get.{description,labels.<value>} - leaks credential, api_key, sensitive_data, pii
artifactregistry.projects.locations.repositories.packages.versions.get.annotations.<value> - leaks credential, api_key, sensitive_data, pii
batch.projects.locations.jobs.get.taskGroups[].taskSpec.runnables[].container.{commands[],options} - leaks credential, password, api_key, access_key, secret_key, oauth_token, sensitive_data
batch.projects.locations.jobs.get.taskGroups[].taskSpec.runnables[].script.text - leaks source_code_secret, credential, password, api_key, private_key
batch.projects.locations.jobs.get.taskGroups[].{taskSpec.environment.variables.<value>,taskSpec.environments.<value>,taskEnvironments[].variables.<value>} - leaks credential, password, api_key, access_key, secret_key, oauth_token, connection_string
batch.projects.locations.jobs.get.taskGroups[].taskSpec.runnables[].container.password - leaks password, credential
batch.projects.locations.jobs.get.status.statusEvents[].description - leaks credential, password, api_key, oauth_token, private_key, connection_string, sensitive_data