CVE-2021-27568: JSON-Smart Project JSON-Smart-v1

Medium severity, CVSS 5.9. EPSS: 2.9% chance of exploitation in the next 30 days.

An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by NumberFormatException. When it is not caught, it may cause programs using the library to crash or expose sensitive information.

Affected products

• JSON-Smart Project JSON-Smart-v1: before 1.3.2 (fixed in 1.3.2)
• JSON-Smart Project JSON-Smart-v2: before 2.3.1 (fixed in 2.3.1); from 2.4, before 2.4.1 (fixed in 2.4.1)
• Oracle Communications Cloud Native Core Policy: version 1.14.0 only
• Oracle OSS Support Tools: before 2.12.42 (fixed in 2.12.42)
• Oracle PeopleSoft Enterprise PeopleTools: version 8.58 only; version 8.59 only
• Oracle Utilities Framework: version 4.4.0.0.0 only; version 4.4.0.2.0 only; version 4.4.0.3.0 only
• Oracle WebLogic Server: version 12.2.1.3.0 only; version 12.2.1.4.0 only; version 14.1.1.0.0 only

Published 2021-02-23. Last modified 2026-10-08.