CWE-755 - Improper Handling of Exceptional Conditions

Home/CWEs/CWE info/

CWE-755 Medium

Abstraction:
Class

Structure:
Simple

Status:
Incomplete

Weakness Name: Improper Handling of Exceptional Conditions

Description: The product does not handle or incorrectly handles an exceptional condition.

Common Consequences: Scope: Other
Impact: Other

Related Weaknesses: CWE-703Improper Check or Handling of Exceptional Conditions

Release Date:
2009-03-10

Latest Modification Date:
2024-02-29

Latest Security News

Cisco Warns of Exploitation of Decade-Old ASA WebVPN Vulnerability

NachoVPN Tool Exploits Flaws in Popular VPN Clients for System Compromise

North Korean Kimsuky Hackers Use Russian Email Addresses for Credential Theft Attacks

Horns&Hooves Campaign Delivers RATs via Fake Emails and JavaScript Payloads

Korea arrests CEO for adding DDoS feature to satellite receivers

Russia sentences Hydra dark web market leader to life in prison

SmokeLoader Malware Resurfaces, Targeting Manufacturing and IT in Taiwan

Mozilla really wants you to set Firefox as default Windows browser

Top Alert List

MediumDirectory Browsing

MediumAbsence of Anti-CSRF Tokens

LowStrict-Transport-Security Multiple Header Entries (Non-compliant with Spec)

Content Security Policy (CSP) Header Not Set

LowServer Leaks Information via "X-Powered-By" HTTP Response Header Field(s)

InformationalModern Web Application

CSP

InformationalNon-Storable Content

LowCookie without SameSite Attribute

LowCross-Domain JavaScript Source File Inclusion

Latest CVE List

CVE-2023-45727 North Grid Proself Improper Restriction of XML External Entity (XEE) Reference Vulnerability

CVE-2024-11680 ProjectSend Improper Authentication Vulnerability

CVE-2024-11667 Zyxel Multiple Firewalls Path Traversal Vulnerability

CVE-2023-28461 Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability

CVE-2024-44308 Apple Multiple Products Code Execution Vulnerability

CVE-2024-44309 Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability

CVE-2024-21287 Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability

CVE-2024-38812 VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

CVE-2024-38813 VMware vCenter Server Privilege Escalation Vulnerability

CVE-2024-1212 Progress Kemp LoadMaster OS Command Injection Vulnerability

Top CWE List

CWE-15 External Control of System or Configuration Setting

HighCWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-1245 Improper Finite State Machines (FSMs) in Hardware Logic

CWE-1395 Dependency on Vulnerable Third-Party Component

HighCWE-200 Exposure of Sensitive Information to an Unauthorized Actor

CWE-614 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

CWE-1426 Improper Validation of Generative AI Output

MediumCWE-190 Integer Overflow or Wraparound

CWE-236 Improper Handling of Undefined Parameters

CWE-328 Use of Weak Hash

Free security scan for your website

Don't show website scan report rating on the leaderboard

CWE-755 - Improper Handling of Exceptional Conditions

The product does not handle or incorrectly handles an exceptional condition.