Common Weakness Enumeration

    CWE Definition / CWE-12

    CWE-12: ASP.NET Misconfiguration: Missing Custom Error Page

    An ASP .NET application must enable custom error pages in order to prevent attackers from mining information from the framework's built-in responses.

    Published:19 Jul 2006
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-756: Missing Custom Error Page