Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

CWE-840 (业务逻辑错误) — Vulnerability Class 97

97 vulnerabilities classified as CWE-840 (业务逻辑错误). AI Chinese analysis included.

This page aggregates vulnerability data specifically for the weakness type CWE-840, known as Improper Handling of Exceptional Conditions, across various vendors and products. The collection encompasses a comprehensive history of security flaws where software fails to manage unexpected events correctly, spanning reports from the inception of the Common Weakness Enumeration database to the most recent disclosures. Visitors can utilize this resource to track specific vendor advisories regarding exception handling failures, understand the broader implications and patterns of this weakness class within modern software architectures, or look up the complete vulnerability history for a particular product affected by improper exception management. By centralizing these entries, the page provides a clear view of how exceptional conditions have historically led to system crashes, data corruption, or security breaches in diverse applications. Users seeking to analyze trends in exception handling or to audit their own systems for similar risks will find detailed metadata, affected component lists, and mitigation strategies relevant to CWE-840 without the distraction of unrelated vulnerability types. This focused aggregation supports security professionals, developers, and auditors in making informed decisions about risk management and code quality improvements related to robust error handling practices.

CVE ID Title CVSS Severity Published
CVE-2023-6566 Business Logic Errors in microweber/microweber — microweber/microweber 5.3 - 2023-12-07
CVE-2023-6514 Huawei Smart Screen 授权问题漏洞 — AJMD-370S 8.8 High 2023-12-06
CVE-2023-6017 H2O S3 Bucket Takeover — h2oai/h2o-3 9.3 - 2023-11-16
CVE-2023-4304 Business Logic Errors in froxlor/froxlor — froxlor/froxlor 3.8 Low 2023-08-11
CVE-2023-29294 Bypass Purchase Order Approval using Company User in Adobe Commerce B2B — Magento Commerce 4.3 Medium 2023-06-15
CVE-2023-3228 Business Logic Errors in fossbilling/fossbilling — fossbilling/fossbilling 4.3 - 2023-06-14
CVE-2023-3229 Business Logic Errors in fossbilling/fossbilling — fossbilling/fossbilling 4.3 - 2023-06-14
CVE-2023-1887 Business Logic Errors in thorsten/phpmyfaq — thorsten/phpmyfaq 4.3 - 2023-04-05
CVE-2023-1542 Business Logic Errors in answerdev/answer — answerdev/answer 7.1 - 2023-03-21
CVE-2023-1541 Business Logic Errors in answerdev/answer — answerdev/answer 7.1 - 2023-03-21
CVE-2023-0565 Business Logic Errors in froxlor/froxlor — froxlor/froxlor 5.5 Medium 2023-01-29
CVE-2022-4719 Business Logic Errors in ikus060/rdiffweb — ikus060/rdiffweb 5.3 - 2022-12-23
CVE-2022-3363 Business Logic Errors in ikus060/rdiffweb — ikus060/rdiffweb 5.3 - 2022-10-26
CVE-2022-32208 curl 缓冲区错误漏洞 — https://github.com/curl/curl 5.9 - 2022-07-07
CVE-2022-32207 curl 安全漏洞 — https://github.com/curl/curl 8.1 - 2022-07-07
CVE-2022-27782 curl 信任管理问题漏洞 — https://github.com/curl/curl 7.5 - 2022-06-01
CVE-2022-1848 Business Logic Errors in erudika/para — erudika/para 5.3 - 2022-05-24
CVE-2022-0935 Host Header injection in password Reset in livehelperchat/livehelperchat — livehelperchat/livehelperchat 8.8 - 2022-04-07
CVE-2022-1155 Old sessions are not blocked by the login enable function. in snipe/snipe-it — snipe/snipe-it 7.4 - 2022-03-30
CVE-2022-0514 Business Logic Errors in crater-invoice/crater — crater-invoice/crater 6.5 - 2022-03-21
CVE-2022-0746 Business Logic Errors in dolibarr/dolibarr — dolibarr/dolibarr 4.3 - 2022-02-25
CVE-2022-0688 Business Logic Errors in microweber/microweber — microweber/microweber 2.7 - 2022-02-20
CVE-2022-0689 Use multiple time the one-time coupon in microweber/microweber — microweber/microweber 4.3 - 2022-02-19
CVE-2022-0524 Business Logic Errors in publify/publify — publify/publify 6.5 - 2022-02-08
CVE-2021-4146 Business Logic Errors in pimcore/pimcore — pimcore/pimcore 4.3 - 2022-01-18
CVE-2021-4171 Business Logic Errors in janeczku/calibre-web — janeczku/calibre-web 8.2 - 2022-01-17
CVE-2021-4117 Business Logic Errors in yetiforcecompany/yetiforcecrm — yetiforcecompany/yetiforcecrm 4.3 - 2021-12-15
CVE-2021-4111 Business Logic Errors in yetiforcecompany/yetiforcecrm — yetiforcecompany/yetiforcecrm 4.3 - 2021-12-15
CVE-2021-36012 Magento Commerce Gift Card Business Logic Error — Magento Commerce 6.5 Medium 2021-09-01
CVE-2021-22926 Slackware信任管理问题漏洞 — https://github.com/curl/curl 7.5 - 2021-08-05

Vulnerabilities classified as CWE-840 (业务逻辑错误) represent 97 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.