CWE-1445 软件弱点详情 | CVE Find

厂商与产品

CPE（Common Platform Enumeration）是一种用于命名硬件、软件和操作系统的标准化方案。CPE 提供了一种结构化命名方案，可根据厂商、产品名称、版本、更新、版次和语言等属性唯一标识和分类信息技术系统、平台和软件包。

名称: OWASP Top Ten 2025 Category A10:2025 - Mishandling of Exceptional Conditions

Weaknesses in this category are related to the A10 category "Mishandling of Exceptional Conditions" in the OWASP Top Ten 2025.

CWE 成员列表

CWE-209: Generation of Error Message Containing Sensitive Information 基础

CWE-215: Insertion of Sensitive Information Into Debugging Code 基础

CWE-234: Failure to Handle Missing Parameter 基础

CWE-235: Improper Handling of Extra Parameters 基础

CWE-248: Uncaught Exception 基础

CWE-252: Unchecked Return Value 基础

CWE-274: Improper Handling of Insufficient Privileges 基础

CWE-280: Improper Handling of Insufficient Permissions or Privileges 基础

CWE-369: Divide By Zero 基础

CWE-390: Detection of Error Condition Without Action 基础

CWE-391: DEPRECATED: Unchecked Error Condition 基础

CWE-394: Unexpected Status Code or Return Value 基础

CWE-396: Declaration of Catch for Generic Exception 基础

CWE-397: Declaration of Throws for Generic Exception 基础

CWE-460: Improper Cleanup on Thrown Exception 基础

CWE-476: NULL Pointer Dereference 基础

CWE-478: Missing Default Case in Multiple Condition Expression 基础

CWE-484: Omitted Break Statement in Switch 基础

CWE-550: Server-generated Error Message Containing Sensitive Information 基础

CWE-636: Not Failing Securely 基础

CWE-703: Improper Check or Handling of Exceptional Conditions 基础

CWE-754: Improper Check for Unusual or Exceptional Conditions 基础

CWE-755: Improper Handling of Exceptional Conditions 基础

CWE-756: Missing Custom Error Page 基础

CWE 信息

漏洞映射说明

依据 : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
备注 : See member weaknesses of this category.

提交记录

名称	组织	日期	发布日期	Version
CWE Content Team	MITRE	2025-12-01 +00:00	2025-12-11 +00:00	4.19

参考资料

REF-1500

OWASP Top 10:2025 RC1
https://owasp.org/Top10/2025/0x00_2025-Introduction/

REF-1510

A10:2025 - Mishandling of Exceptional Conditions
OWASP.
https://owasp.org/Top10/2025/A10_2025-Mishandling_of_Exceptional_Conditions/