Common Weakness Enumeration

    CWE Definition / CWE-536

    CWE-536: Servlet Runtime Error Message Containing Sensitive Information

    A servlet error message indicates that there exists an unhandled exception in the web application code and may provide useful information to an attacker.

    Published:19 Jul 2006
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-211: Externally-Generated Error Message Containing Sensitive Information