1576
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 742 CERT C Secure Coding Standard (2008) Chapter 9 -
Memory Management (MEM)
734 2345
MemberOf 802 2010 Top 25 - Risky Resource Management 800 2354
MemberOf 867 2011 Top 25 - Weaknesses On the Cusp 900 2372
MemberOf 876 CERT C++ Secure Coding Section 08 - Memory
Management (MEM)
868 2376
MemberOf 880 CERT C++ Secure Coding Section 12 - Exceptions and
Error Handling (ERR)
868 2379
MemberOf 962 SFP Secondary Cluster: Unchecked Status Condition 888 2400
MemberOf 1003 Weaknesses for Simplified Mapping of Published
Vulnerabilities
1003 2576
MemberOf 1141 SEI CERT Oracle Secure Coding Standard for Java -
Guidelines 07. Exceptional Behavior (ERR)
1133 2448
MemberOf 1181 SEI CERT Perl Coding Standard - Guidelines 03.
Expressions (EXP)
1178 2466
MemberOf 1364 ICS Communications: Zone Boundary Failures 1358 2501
MemberOf 1405 Comprehensive Categorization: Improper Check or
Handling of Exceptional Conditions
1400 2531
Notes
Relationship
Sometimes, when a return value can be used to indicate an error, an unchecked return value is
a code-layer instance of a missing application-layer check for exceptional conditions. However,
return values are not always needed to communicate exceptional conditions. For example,
expiration of resources, values passed by reference, asynchronously modified data, sockets, etc.
may indicate exceptional conditions without the use of a return value.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
SEI CERT Perl Coding
Standard
EXP31-
PL
CWE More
Abstract
Do not suppress or ignore exceptions
ISA/IEC 62443 Part 4-2 Req CR 3.5
ISA/IEC 62443 Part 4-2 Req CR 3.7
References
[REF-62]Mark Dowd, John McDonald and Justin Schuh. "The Art of Software Security
Assessment". 1st Edition. 2006. Addison Wesley.
[REF-62]Mark Dowd, John McDonald and Justin Schuh. "The Art of Software Security
Assessment". 1st Edition. 2006. Addison Wesley.
[REF-44]Michael Howard, David LeBlanc and John Viega. "24 Deadly Sins of Software Security".
McGraw-Hill. 2010.
[REF-622]Frank Kim. "Top 25 Series - Rank 15 - Improper Check for Unusual or Exceptional
Conditions". 2010 March 5. SANS Software Security Institute. < https://www.sans.org/blog/top-25-
series-rank-15-improper-check-for-unusual-or-exceptional-conditions/ >.2023-04-07.
CWE-755: Improper Handling of Exceptional Conditions
Weakness ID : 755
CWE Version 4.14
CWE-755: Improper Handling of Exceptional Conditions
CWE-755: Improper Handling of Exceptional Conditions