CWE-394Unexpected Status Code or Return Value

PUBLISHEDweakness record
released 2006-07-19 · last modified 2025-12-11

Metadata

CWE ID:
CWE-394
Abstraction:
Base
Structure:
Simple
Status:
Draft
Release Date:
2006-07-19
Latest Modification Date:
2025-12-11

Weakness Name

Unexpected Status Code or Return Value

Description

The product does not properly check when a function or operation returns a value that is legitimate for the function, but is not expected by the product.

Common Consequences

Scope:
Integrity, Other
Impact:
Unexpected State, Alter Execution Logic

Related Weaknesses