CWEweakness
CWE-544 Missing Standardized Error Handling Mechanism
- Abstraction
- Base
- Structure
- Simple
- Status
- Draft
- Languages
- Not Language-Specific
- CWE version
- 5.0
Description
The product does not use a standardized method for handling errors throughout the code.
Common consequences
• Integrity, Other: Quality Degradation, Unexpected State, Varies by Context — If the product handles error messages individually, on a one-by-one basis, this is likely to result in inconsistent error handling. The causes of errors may be lost. Also, detailed information about the causes of an error may be unintentionally returned to the user. There may be resultant weaknesses.
Potential mitigations
• [Architecture and Design] define a strategy for handling errors of different severities, such as fatal errors versus basic log events. Use or create built-in language features, or an external package, that provides an easy-to-use API and define coding standards for the detection and handling of errors.
Related
Child of · CWE (1)
- CWE-755 Improper Handling of Exceptional Conditions weakness
Referenced by CVE · weakness (8)
- CVE-2026-20321 A vulnerability in the web-based management API for Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated,… vulnerability
- CVE-2025-11750 In langgenius/dify-web version 1.6.0, the authentication mechanism reveals the existence of user accounts by returning different error… vulnerability
- CVE-2024-41768 IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to cause an unhandled SSL exception which… vulnerability
- CVE-2024-47971 Improper error handling in firmware of some SSD DC Products may allow an attacker to enable denial of service. vulnerability
- CVE-2021-47482 In the Linux kernel, the following vulnerability has been resolved: net: batman-adv: fix error handling Syzbot reported ODEBUG warning in… vulnerability
- CVE-2023-6599 Missing Standardized Error Handling Mechanism in GitHub repository microweber/microweber prior to 2.0. vulnerability
- CVE-2023-29105 A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC712 (All… vulnerability
- CVE-2020-5359 Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to an Unchecked Return Value Vulnerability. vulnerability