CVE-2021-27568
Medium
Description
An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by NumberFormatException. When it is not caught, it may cause programs using the library to crash or expose sensitive information.
SeverityMedium
CVSS5.9
Exploit probability—
Product
Json-smart Project Json-smart-v1
PublishedFeb 23, 2021
First seenFeb 23, 2021
How to fix
Update
- json-smart_project json-smart-v11.3.2 or later
- json-smart_project json-smart-v22.3.1, 2.4.1 or later
- oracle oss_support_tools2.12.42 or later
- net.minidev:json-smart1.3.2, 2.4.1, 2.3.1 or later
- net.minidev:json-smart-mini1.3.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| json-smart_project json-smart-v1 | v < 1.3.2 | 1.3.2 |
| json-smart_project json-smart-v2 | v < 2.3.1, 2.4 ≤ v < 2.4.1 | 2.3.1, 2.4.1 |
| oracle communications_cloud_native_core_policy | 1.14.0 | — |
| oracle oss_support_tools | v < 2.12.42 | 2.12.42 |
| oracle peoplesoft_enterprise_peopletools | 8.58, 8.59 | — |
| oracle utilities_framework | 4.4.0.0.0, 4.4.0.2.0, 4.4.0.3.0 | — |
| oracle weblogic_server | 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 | — |
| net.minidev:json-smartMaven | v < 1.3.2, 2.4.0 ≤ v < 2.4.1, 2.0.0 ≤ v < 2.3.1 | 1.3.2, 2.4.1, 2.3.1 |
| net.minidev:json-smart-miniMaven | v < 1.3.2 | 1.3.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.