CVE-2021-27568: json-smart_project json-smart-v1
Vulnerability summary
CVE-2021-27568 is a medium (CVSS 5.9) vulnerability in json-smart_project json-smart-v1. EPSS estimates a 2.90% chance of exploitation in the next 30 days, higher than 86.7% of scored vulnerabilities. 2 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 0 · Related 1Timeline
- 23-02-2021PublishedVulnerability first disclosed.
- 08-10-2026Last modifiedVulnerability information updated.
Description
An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by NumberFormatException. When it is not caught, it may cause programs using the library to crash or expose sensitive information.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · ChainguardEcosystem advisory · calculated5.9MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · MavenEcosystem advisory · calculated5.9MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
2.90%
Chance of exploitation in the next 30 days
Percentile
87%
Versus all other CVEs
30-day change
0.00 pp
From 2.90% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundJson Smart V1
Maturity: poc
Json Smart V2
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Oracle5 products
- communications_cloud_native_core_policy1.14.0
- oss_support_tools< 2.12.42
- peoplesoft_enterprise_peopletools8.58 | 8.59
- utilities_framework4.4.0.0.0 | 4.4.0.2.0 | 4.4.0.3.0
- weblogic_server12.2.1.3.0 | 12.2.1.4.0 | 14.1.1.0.0
Chainguard3 products
- hadoop-fips-3.3.6< 3.3.6-r15 | < 3.3.6-r21
- hadoop-fips-3.4.2All versions (No fix recorded)
- hadoop-fips-3.5< 3.5.0-r7
Json-smart_project2 products
- json-smart-v1< 1.3.2
- json-smart-v2< 2.3.1 | ≥ 2.4, < 2.4.1
Net.minidev2 products
- json-smart< 1.3.2 | ≥ 2.4.0, < 2.4.1 | ≥ 2.0.0, < 2.3.1
- json-smart-mini< 1.3.2
4 vendors · 12 products
