CWE-703: Improper Check or Handling of Exceptional Conditions
Description
The product does not properly anticipate or handle exceptional conditions that rarely occur during normal operation of the product.
- Abstraction
- PillarThe most abstract kind of weakness: a theme that groups classes.
- Likelihood of exploit
- Not rated by MITRE
- Status
- Incomplete
Common consequences
- ConfidentialityAvailabilityIntegrity
Read Application Data; DoS: Crash, Exit, or Restart; Unexpected State
Related weaknesses
Child weaknesses
- CWE-228Improper Handling of Syntactically Invalid Structure
- CWE-393Return of Wrong Status Code
- CWE-397Declaration of Throws for Generic Exception
- CWE-754Improper Check for Unusual or Exceptional Conditions
- CWE-755Improper Handling of Exceptional Conditions
- CWE-1384Improper Handling of Physical or Environmental Conditions
CAPEC attack patterns that exploit it
CWE 4.20 links no CAPEC attack pattern to this weakness.