CWE-600: Uncaught Exception in Servlet

low-risk

The Servlet does not catch all exceptions, which may reveal sensitive debugging information.

Abstraction: Variant

Common Consequences

Confidentiality Read Application Data

Real-World Examples (1)

CVE CVSS EPSS KEV
CVE-2023-35123 4.3 0.1%
0
/ 100
low-risk
Active Threat 0/50 · Minimal
Exploit Availability 0/50 · Minimal