Detail Kategori CWE-1445

CWE-1445

OWASP Top Ten 2025 Category A10:2025 - Mishandling of Exceptional Conditions
2025-12-11 +00:00
Incomplete
CWE Mitre.org
Notifikasi untuk CWE tertentu
Tetap terinformasi tentang perubahan untuk CWE tertentu.
Kelola notifikasi

Nama: OWASP Top Ten 2025 Category A10:2025 - Mishandling of Exceptional Conditions

Weaknesses in this category are related to the A10 category "Mishandling of Exceptional Conditions" in the OWASP Top Ten 2025.

Daftar Anggota CWE

CWE-209: Generation of Error Message Containing Sensitive Information Dasar

CWE-215: Insertion of Sensitive Information Into Debugging Code Dasar

CWE-234: Failure to Handle Missing Parameter Dasar

CWE-235: Improper Handling of Extra Parameters Dasar

CWE-248: Uncaught Exception Dasar

CWE-252: Unchecked Return Value Dasar

CWE-274: Improper Handling of Insufficient Privileges Dasar

CWE-280: Improper Handling of Insufficient Permissions or Privileges Dasar

CWE-369: Divide By Zero Dasar

CWE-390: Detection of Error Condition Without Action Dasar

CWE-391: DEPRECATED: Unchecked Error Condition Dasar

CWE-394: Unexpected Status Code or Return Value Dasar

CWE-396: Declaration of Catch for Generic Exception Dasar

CWE-397: Declaration of Throws for Generic Exception Dasar

CWE-460: Improper Cleanup on Thrown Exception Dasar

CWE-476: NULL Pointer Dereference Dasar

CWE-478: Missing Default Case in Multiple Condition Expression Dasar

CWE-484: Omitted Break Statement in Switch Dasar

CWE-550: Server-generated Error Message Containing Sensitive Information Dasar

CWE-636: Not Failing Securely Dasar

CWE-703: Improper Check or Handling of Exceptional Conditions Dasar

CWE-754: Improper Check for Unusual or Exceptional Conditions Dasar

CWE-755: Improper Handling of Exceptional Conditions Dasar

CWE-756: Missing Custom Error Page Dasar

Informasi CWE

Catatan Pemetaan Kerentanan

Justifikasi : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
Komentar : See member weaknesses of this category.

Pengajuan

Nama Organisasi Tanggal Tanggal rilis Version
CWE Content Team MITRE 2025-12-01 +00:00 2025-12-11 +00:00 4.19

Referensi

REF-1500

OWASP Top 10:2025 RC1
https://owasp.org/Top10/2025/0x00_2025-Introduction/

REF-1510

A10:2025 - Mishandling of Exceptional Conditions
OWASP.
https://owasp.org/Top10/2025/A10_2025-Mishandling_of_Exceptional_Conditions/

Informasi yang disajikan di CVE Find berasal dari beberapa sumber referensi yang dipilih dengan cermat. Data CVE disediakan oleh MITRE Corporation dan National Vulnerability Database (NVD). Katalog Known Exploited Vulnerabilities (KEV) bersumber dari Cybersecurity and Infrastructure Security Agency (CISA), sementara skor EPSS berasal dari FIRST.org. Selain itu, data mengenai kelemahan perangkat lunak (CWE) dan pola serangan umum (CAPEC) dikelola oleh MITRE Corporation, dan informasi tentang konfigurasi perangkat keras dan perangkat lunak (CPE) disediakan oleh NVD.