CWE-755 对异常条件的处理不恰当 类弱点 173 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-755属于异常处理不当漏洞，指软件未能正确应对或忽略异常状况。攻击者常通过触发特定异常（如空指针或资源耗尽）导致程序崩溃、拒绝服务或执行非预期逻辑，从而获取权限或破坏系统稳定性。开发者应避免捕获过于宽泛的异常，需实施细粒度的错误处理机制，确保在异常发生时能安全恢复状态或提供明确反馈，防止内部信息泄露及服务中断。
protected void doPost (HttpServletRequest req, HttpServletResponse res) throws IOException { String ip = req.getRemoteAddr(); InetAddress addr = InetAddress.getByName(ip); ... out.println("hello " + addr.getHostName()); }foo=malloc(sizeof(char)); //the next line checks to see if malloc failed if (foo==NULL) { //We do nothing so we just ignore the error. }foo=malloc(sizeof(char)); //the next line checks to see if malloc failed if (foo==NULL) { printf("Malloc failed to allocate memory resources"); return -1; }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2021-0259 | Juniper Networks Junos OS和Junos OS Evolved 安全漏洞 — Junos OS | 7.4 | High | 2021-04-22 |
| CVE-2021-23886 | Mcafee Data Loss Prevention Endpoint 安全漏洞 — McAfee Data Loss Prevention (DLP) Endpoint for Windows | 5.5 | Medium | 2021-04-15 |
| CVE-2020-25236 | Siemens LOGO! 8 BM 安全漏洞 — LOGO! 12/24RCE | 5.5 | Medium | 2021-03-15 |
| CVE-2020-2020 | Palo Alto Networks Cortex XDR Agent 安全漏洞 — Cortex XDR Agent | 5.5 | Medium | 2020-12-09 |
| CVE-2020-7926 | Mongodb Server 安全漏洞 — MongoDB Server | 6.5 | Medium | 2020-11-23 |
| CVE-2020-1681 | Juniper Networks Junos OS Evolved 安全漏洞 — Junos OS Evolved | 6.5 | Medium | 2020-10-16 |
| CVE-2020-5387 | Dell XPS 13 9370 安全漏洞 — CPG BIOS | 2.3 | Low | 2020-10-01 |
| CVE-2020-15223 | ORY Fosite 代码问题漏洞 — fosite | 8.0 | High | 2020-09-24 |
| CVE-2020-7923 | MongoDB Server 安全漏洞 — MongoDB Server | 6.5 | Medium | 2020-08-21 |
| CVE-2020-15701 | Apport 安全漏洞 — apport | 5.5 | Medium | 2020-08-06 |
| CVE-2020-1643 | Juniper Networks Junos OS 安全漏洞 — Junos OS | 5.5 | Medium | 2020-07-17 |
| CVE-2020-15117 | Synergy 安全漏洞 — synergy-core | 6.5 | Medium | 2020-07-15 |
| CVE-2020-1744 | Red Hat Keycloak 信息泄露漏洞 — keycloak | 5.6 | Medium | 2020-03-24 |
| CVE-2019-10222 | Red Hat Ceph 资源管理错误漏洞 — ceph | 7.5 | - | 2019-11-08 |
| CVE-2019-6848 | Schneider Electric 多款产品输入验证错误漏洞 — Modicon M580 CPU (BMEx58*) and Modicon M580 communication module (BMENOC0311, BMENOC0321) (see notification for version info) | 8.6 | - | 2019-10-29 |
| CVE-2019-6847 | 多款Schneider Electric产品安全漏洞 — Modicon M580, Modicon M340, and Modicon BMxCRA / 140CRA modules (see notification for version info) | 4.9 | - | 2019-10-29 |
| CVE-2019-6844 | 多款Schneider产品安全漏洞 — Modicon M580, Modicon M340, and Modicon BMxCRA / 140CRA modules (see notification for version info) | 4.9 | - | 2019-10-29 |
| CVE-2019-6843 | 多款Schneider Electric产品安全漏洞 — Modicon M580, Modicon M340, and Modicon BMxCRA / 140CRA modules (see notification for version info) | 4.9 | - | 2019-10-29 |
| CVE-2019-6842 | 多款Schneider Electric产品安全漏洞 — Modicon M580, Modicon M340, and Modicon BMxCRA / 140CRA modules (see notification for version info) | 4.9 | - | 2019-10-29 |
| CVE-2019-6841 | 多款Schneider产品安全漏洞 — Modicon M580, Modicon M340, and Modicon BMxCRA / 140CRA modules (see notification for version info) | 4.9 | - | 2019-10-29 |
| CVE-2019-0051 | Juniper Networks SRX5000 Junos OS 安全漏洞 — Junos OS | 6.5 | Medium | 2019-10-09 |
| CVE-2019-8462 | Check Point R80.30 Security Gateway 安全漏洞 — Check Point Security Gateway | 7.5 | - | 2019-10-02 |
| CVE-2017-9658 | Philips IntelliVue MX40 Patient Worn Monitor 安全漏洞 — IntelliVue MX40 Patient Worn Monitor | 6.5 | - | 2018-04-30 |
CWE-755（对异常条件的处理不恰当） 是常见的弱点类别，本平台收录该类弱点关联的 173 条 CVE 漏洞。