CWE-1445 軟體弱點詳細資料 | CVE Find

廠商與產品

CPE（通用平台枚舉）是一種用於命名硬體、軟體和作業系統的標準化方案。CPE 提供結構化命名方式，可根據廠商、產品名稱、版本、更新、版次和語言等特定屬性，唯一識別和分類資訊技術系統、平台和套件。

名稱: OWASP Top Ten 2025 Category A10:2025 - Mishandling of Exceptional Conditions

Weaknesses in this category are related to the A10 category "Mishandling of Exceptional Conditions" in the OWASP Top Ten 2025.

CWE 成員列表

CWE-209: Generation of Error Message Containing Sensitive Information 基礎

CWE-215: Insertion of Sensitive Information Into Debugging Code 基礎

CWE-234: Failure to Handle Missing Parameter 基礎

CWE-235: Improper Handling of Extra Parameters 基礎

CWE-248: Uncaught Exception 基礎

CWE-252: Unchecked Return Value 基礎

CWE-274: Improper Handling of Insufficient Privileges 基礎

CWE-280: Improper Handling of Insufficient Permissions or Privileges 基礎

CWE-369: Divide By Zero 基礎

CWE-390: Detection of Error Condition Without Action 基礎

CWE-391: DEPRECATED: Unchecked Error Condition 基礎

CWE-394: Unexpected Status Code or Return Value 基礎

CWE-396: Declaration of Catch for Generic Exception 基礎

CWE-397: Declaration of Throws for Generic Exception 基礎

CWE-460: Improper Cleanup on Thrown Exception 基礎

CWE-476: NULL Pointer Dereference 基礎

CWE-478: Missing Default Case in Multiple Condition Expression 基礎

CWE-484: Omitted Break Statement in Switch 基礎

CWE-550: Server-generated Error Message Containing Sensitive Information 基礎

CWE-636: Not Failing Securely 基礎

CWE-703: Improper Check or Handling of Exceptional Conditions 基礎

CWE-754: Improper Check for Unusual or Exceptional Conditions 基礎

CWE-755: Improper Handling of Exceptional Conditions 基礎

CWE-756: Missing Custom Error Page 基礎

CWE 資訊

漏洞對應備注

理由說明 : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
備註 : See member weaknesses of this category.

提交

名稱	機構	日期	發布日期	Version
CWE Content Team	MITRE	2025-12-01 +00:00	2025-12-11 +00:00	4.19

參考資料

REF-1500

OWASP Top 10:2025 RC1
https://owasp.org/Top10/2025/0x00_2025-Introduction/

REF-1510

A10:2025 - Mishandling of Exceptional Conditions
OWASP.
https://owasp.org/Top10/2025/A10_2025-Mishandling_of_Exceptional_Conditions/