Home/CWEs/CWE info/

CWE-755 - Improper Handling of Exceptional Conditions

CWE-755 Medium

Abstraction:
Class

Structure:
Simple

Status:
Incomplete

Weakness Name: Improper Handling of Exceptional Conditions

Description: The product does not handle or incorrectly handles an exceptional condition.

Common Consequences: Scope: Other
Impact: Other

Related Weaknesses: CWE-703Improper Check or Handling of Exceptional Conditions

Release Date:
2009-03-10

Latest Modification Date:
2024-02-29

Top Security News

Ivanti Flaw CVE-2025-0282 Actively Exploited, Impacts Connect Secure and Policy Secure

CISA Adds Second BeyondTrust Flaw to KEV Catalog Amid Active Attacks

Windows Server 2025 released—here are the new features

Microsoft: macOS bug lets hackers install malicious kernel drivers

Apache Tomcat Vulnerability CVE-2024-56337 Exposes Servers to RCE Attacks

FBI deletes Chinese PlugX malware from thousands of US computers

Google Cloud Researchers Uncover Flaws in Rsync File Synchronization Tool

Windows 11 24H2 now rolling out, here are the new features

Common Alerts

InformationalBase64 Disclosure in WebSocket message

MediumCRLF Injection

LowHTTPS Content Available via HTTP

LowServer Leaks Information via "X-Powered-By" HTTP Response Header Field(s)

InformationalHTTP Parameter Pollution

InformationalModern Web Application

MediumELMAH Information Leak

LowServer Leaks Version Information via "Server" HTTP Response Header Field

HighServer Side Template Injection (Blind)

LowCSP: Notices

Latest CVE List

CVE-2024-55591 Fortinet FortiOS Authorization Bypass Vulnerability

CVE-2025-21333 Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability

CVE-2025-21334 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

CVE-2025-21335 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

CVE-2024-12686 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability

CVE-2023-48365 Qlik Sense HTTP Tunneling Vulnerability

CVE-2025-0282 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

CVE-2024-41713 Mitel MiCollab Path Traversal Vulnerability

CVE-2024-55550 Mitel MiCollab Path Traversal Vulnerability

CVE-2020-2883 Oracle WebLogic Server Unspecified Vulnerability

Common CWEs

CWE-248 Uncaught Exception

CWE-65 Windows Hard Link

CWE-231 Improper Handling of Extra Values

CWE-409 Improper Handling of Highly Compressed Data (Data Amplification)

HighCWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CWE-527 Exposure of Version-Control Repository to an Unauthorized Control Sphere

CWE-55 Path Equivalence: '/./' (Single Dot Directory)

CWE-317 Cleartext Storage of Sensitive Information in GUI

CWE-830 Inclusion of Web Functionality from an Untrusted Source

CWE-941 Incorrectly Specified Destination in a Communication Channel

Free online web security scanner

Don't show website scan report rating on the leaderboard

CWE-755 - Improper Handling of Exceptional Conditions

The product does not handle or incorrectly handles an exceptional condition.