574
emailAddress.setString(1, address);
If the value of the address parameter is null (undefined), the servlet will throw a
NullPointerException when the trim() is attempted.
Observed Examples
Reference Description
CVE-2000-1003 Client crash when server returns unknown driver type.
https://www.cve.org/CVERecord?id=CVE-2000-1003
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 851 The CERT Oracle Secure Coding Standard for Java
(2011) Chapter 8 - Exceptional Behavior (ERR)
844 2365
MemberOf 993 SFP Secondary Cluster: Incorrect Input Handling 888 2417
MemberOf 1407 Comprehensive Categorization: Improper Neutralization 1400 2532
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Undefined Value Error
The CERT Oracle Secure
Coding Standard for Java
(2011)
ERR08-J Do not catch NullPointerException or
any of its ancestors
CWE-233: Improper Handling of Parameters
Weakness ID : 233
Structure : Simple
Abstraction : Base
Description
The product does not properly handle when the expected number of parameters, fields, or
arguments is not provided in input, or if those parameters are undefined.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 228 Improper Handling of Syntactically Invalid Structure 568
ParentOf 234 Failure to Handle Missing Parameter 576
ParentOf 235 Improper Handling of Extra Parameters 578
ParentOf 236 Improper Handling of Undefined Parameters 579
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 19 Data Processing Errors 2309
CWE Version 4.14
CWE-233: Improper Handling of Parameters
CWE-233: Improper Handling of Parameters