1536
Nature Type ID Name Page
ParentOf 228 Improper Handling of Syntactically Invalid Structure 568
ParentOf 393 Return of Wrong Status Code 953
ParentOf 397 Declaration of Throws for Generic Exception 961
ParentOf 754 Improper Check for Unusual or Exceptional Conditions 1568
ParentOf 755 Improper Handling of Exceptional Conditions 1576
ParentOf 1384 Improper Handling of Physical or Environmental Conditions 2257
Relevant to the view "Architectural Concepts" (CWE-1008)
Nature Type ID Name Page
MemberOf 1012 Cross Cutting 2427
Relevant to the view "CISQ Quality Measures (2020)" (CWE-1305)
Nature Type ID Name Page
ParentOf 248 Uncaught Exception 596
ParentOf 391 Unchecked Error Condition 948
ParentOf 392 Missing Report of Error Condition 951
Relevant to the view "CISQ Data Protection Measures" (CWE-1340)
Nature Type ID Name Page
ParentOf 248 Uncaught Exception 596
ParentOf 391 Unchecked Error Condition 948
ParentOf 392 Missing Report of Error Condition 951
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Technology : Not Technology-Specific (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Confidentiality
Availability
Integrity
Read Application Data
DoS: Crash, Exit, or Restart
Unexpected State
Detection Methods
Dynamic Analysis with Manual Results Interpretation
According to SOAR, the following detection techniques may be useful: Highly cost effective: Fault
Injection - source code Fault Injection - binary Cost effective for partial coverage: Forced Path
Execution
Effectiveness = High
Manual Static Analysis - Source Code
According to SOAR, the following detection techniques may be useful: Highly cost effective:
Manual Source Code Review (not inspections) Cost effective for partial coverage: Focused
Manual Spotcheck - Focused manual analysis of source
Effectiveness = High
Automated Static Analysis - Source Code
According to SOAR, the following detection techniques may be useful: Cost effective for partial
coverage: Source code Weakness Analyzer Context-configured Source Code Weakness
Analyzer
Effectiveness = SOAR Partial
CWE Version 4.14
CWE-703: Improper Check or Handling of Exceptional Conditions
CWE-703: Improper Check or Handling of Exceptional Conditions