Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

CWE-840 (业务逻辑错误) — Vulnerability Class 97

97 vulnerabilities classified as CWE-840 (业务逻辑错误). AI Chinese analysis included.

This page aggregates vulnerability data specifically for the weakness type CWE-840, known as Improper Handling of Exceptional Conditions, across various vendors and products. The collection encompasses a comprehensive history of security flaws where software fails to manage unexpected events correctly, spanning reports from the inception of the Common Weakness Enumeration database to the most recent disclosures. Visitors can utilize this resource to track specific vendor advisories regarding exception handling failures, understand the broader implications and patterns of this weakness class within modern software architectures, or look up the complete vulnerability history for a particular product affected by improper exception management. By centralizing these entries, the page provides a clear view of how exceptional conditions have historically led to system crashes, data corruption, or security breaches in diverse applications. Users seeking to analyze trends in exception handling or to audit their own systems for similar risks will find detailed metadata, affected component lists, and mitigation strategies relevant to CWE-840 without the distraction of unrelated vulnerability types. This focused aggregation supports security professionals, developers, and auditors in making informed decisions about risk management and code quality improvements related to robust error handling practices.

CVE ID Title CVSS Severity Published
CVE-2025-6601 Business Logic Errors in GitLab — GitLab 2.7 Low 2025-10-27
CVE-2025-58289 Huawei HarmonyOS 安全漏洞 — HarmonyOS 5.9 Medium 2025-10-11
CVE-2025-10868 Business Logic Errors in GitLab — GitLab 3.5 Low 2025-09-26
CVE-2025-8991 linlinjava litemall Business Logic express logic error — litemall 4.3 Medium 2025-08-15
CVE-2025-54611 Huawei HarmonyOS和Huawei EMUI 安全漏洞 — HarmonyOS 7.3 High 2025-08-06
CVE-2025-54606 Huawei HarmonyOS 安全漏洞 — HarmonyOS 7.3 High 2025-08-06
CVE-2025-2938 Business Logic Errors in GitLab — GitLab 3.1 Low 2025-06-26
CVE-2025-4037 code-projects ATM Banking moneyWithdraw logic error — ATM Banking 4.4 Medium 2025-04-28
CVE-2025-1908 Business Logic Errors in GitLab — GitLab 7.7 High 2025-04-24
CVE-2024-6577 Unclaimed S3 Bucket Usage in pytorch/serve — pytorch/serve 9.1 - 2025-03-20
CVE-2025-2321 274056675 springboot-openai-chatgpt addData logic error — springboot-openai-chatgpt 6.3 Medium 2025-03-15
CVE-2024-58046 Huawei HarmonyOS 安全漏洞 — HarmonyOS 6.2 Medium 2025-03-04
CVE-2024-58043 Huawei EMUI和Huawei HarmonyOS 安全漏洞 — HarmonyOS 7.3 High 2025-03-04
CVE-2024-45424 Zoom Workplace Apps - Business Logic Error — Zoom Workplace Apps 5.3 Medium 2025-02-25
CVE-2025-24425 Adobe Commerce | Business Logic Errors (CWE-840) — Adobe Commerce 5.3 Medium 2025-02-11
CVE-2024-56449 Huawei HarmonyOS 安全漏洞 — HarmonyOS 6.6 Medium 2025-01-08
CVE-2024-54098 Huawei EMUI和Huawei HarmonyOS 安全漏洞 — HarmonyOS 8.5 High 2024-12-12
CVE-2024-1682 Unclaimed S3 Bucket Reference in psf/requests Documentation — psf/requests 9.8 - 2024-11-14
CVE-2024-51523 Huawei HarmonyOS 安全漏洞 — HarmonyOS 7.1 High 2024-11-05
CVE-2018-25104 CoinGate Plugin Payment callback.php postProcess logic error — CoinGate Plugin 4.3 Medium 2024-10-17
CVE-2024-6446 Business Logic Errors in GitLab — GitLab 3.5 Low 2024-09-12
CVE-2024-42034 Huawei EMUI和Huawei HarmonyOS 安全漏洞 — HarmonyOS 6.6 Medium 2024-08-08
CVE-2024-39671 Huawei EMUI和Huawei HarmonyOS 安全漏洞 — HarmonyOS 9.3 Critical 2024-07-25
CVE-2023-7271 Huawei EMUI和Huawei HarmonyOS 安全漏洞 — HarmonyOS 5.5 Medium 2024-07-25
CVE-2024-4046 Huawei HarmonyOS 安全漏洞 — HarmonyOS 6.4 Medium 2024-05-11
CVE-2024-32999 Huawei HarmonyOS 安全漏洞 — HarmonyOS 6.8 Medium 2024-05-11
CVE-2024-1456 S3 Bucket Takeover in h2oai/h2o-3 — h2oai/h2o-3 9.8 - 2024-04-16
CVE-2024-2267 keerti1924 Online-Book-Store-Website shop.php logic error — Online-Book-Store-Website 4.3 Medium 2024-03-07
CVE-2024-2151 SourceCodester Online Mobile Management Store Product Price logic error — Online Mobile Management Store 4.3 Medium 2024-03-03
CVE-2023-6832 Business Logic Errors in microweber/microweber — microweber/microweber 5.3 - 2023-12-15

Vulnerabilities classified as CWE-840 (业务逻辑错误) represent 97 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.