CWE-396: Declaration of Catch for Generic Exception
Overview
CWE-396 (Declaration of Catch for Generic Exception) documents a weakness type used across vulnerability databases and security assessments. Use the sections below for definition, context, and mapped CVEs.
Security impact
Security impact: Depends on product and context; use CVE records, severity scores, and MITRE guidance to prioritize.
Description
Catching overly broad exceptions promotes complex error handling code that is more likely to contain security vulnerabilities.
Applicable platforms
Kind
Name
Class
Prevalence
OS / CPE
language
C++
—
Undetermined
—
language
Java
—
Undetermined
—
language
C#
—
Undetermined
—
language
Python
—
Undetermined
—
Related CVEs in this database
These CVEs are mapped to this weakness in this database and kept for traceability and search.
PraisonAI is a multi-agent teams system. Prior to 4.5.128, the gateway's /api/approval/allow-list endpoint permits unauthenticated modification of the tool approval allowlist when no auth_token is con…
Ray is an AI compute engine. In versions 2.53.0 and below, thedashboard HTTP server blocks browser-origin POST/PUT but does not cover DELETE, and key DELETE endpoints are unauthenticated by default. I…