SEI CERT Oracle Secure Coding Standard for Java - Guidelines 07. Exceptional Behavior (ERR)

Throwing overly broad exceptions promotes complex error handling code that is more likely to contain security vulnerabilities.

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the pro...

The product does not properly anticipate or handle exceptional conditions that rarely occur during normal operation of the product.

The product does not clean up its state or incorrectly cleans up its state when an exception is thrown, leading to unexpected state or control flow.

The product does not properly "clean up" and remove temporary or supporting resources after they have been used.

The product does not properly return control flow to the proper location after it has completed a task or detected an unusual condition.

A J2EE application uses System.exit(), which also shuts down its container.

The code has a return statement inside a finally block, which will cause any thrown exception in the try block to be discarded.

An exception is thrown from a function, but it is not caught.

CWE entries in this view (graph) are fully or partially eliminated by following the guidance presented in the online wiki that reflects that current rules and recommen...