CWE-755: Improper Handling of Exceptional Conditions
Description
The product does not handle or incorrectly handles an exceptional condition.
- Abstraction
- ClassAn abstract weakness, independent of any specific language or technology.
- Likelihood of exploit
- Medium
- Status
- Incomplete
Common consequences
- Other
Other
Related weaknesses
Parent weaknesses
Child weaknesses
- CWE-209Generation of Error Message Containing Sensitive Information
- CWE-248Uncaught Exception
- CWE-274Improper Handling of Insufficient Privileges
- CWE-280Improper Handling of Insufficient Permissions or Privileges
- CWE-333Improper Handling of Insufficient Entropy in TRNG
- CWE-390Detection of Error Condition Without Action
- CWE-392Missing Report of Error Condition
- CWE-395Use of NullPointerException Catch to Detect NULL Pointer Dereference
- CWE-396Declaration of Catch for Generic Exception
- CWE-460Improper Cleanup on Thrown Exception
- CWE-544Missing Standardized Error Handling Mechanism
- CWE-636Not Failing Securely ('Failing Open')
- CWE-756Missing Custom Error Page
CAPEC attack patterns that exploit it
CWE 4.20 links no CAPEC attack pattern to this weakness.