CVE-2021-27568 in Json Smartproject and Oracle Products
Published on February 23, 2021
An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by NumberFormatException. When it is not caught, it may cause programs using the library to crash or expose sensitive information.
Vulnerability Analysis
Exploitation:
NONE
Automatable:
YES
Technical Impact:
PARTIAL
Products Associated with CVE-2021-27568
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2021-27568 are published in these products:
Exploit Probability
EPSS
2.89%
Percentile
87.07%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.