---
title: "CWE-1027: OWASP Top Ten 2017 Category A1 - Injection"
url: https://radicalnotion.ai/cwe/cwe-1027
type: cwe
description: "Weaknesses in this category are related to the A1 category in the OWASP Top Ten 2017."
updated: 2026-05-01
source: RadicalNotion.AI
license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/)
---

# CWE-1027: OWASP Top Ten 2017 Category A1 - Injection

- **Status:** Incomplete
- **CVEs with this as primary weakness:** 2
- **Of those, in CISA KEV:** 0
- **New in 2026:** 1
- **CWE catalog version:** 4.20

## Description

Weaknesses in this category are related to the A1 category in the OWASP Top Ten 2017.

## Real CVEs with this weakness

| CVE | Title | Severity | CVSS | EPSS | CISA KEV | Published |
| --- | --- | --- | --- | --- | --- | --- |
| CVE-2021-27021 | - | high | 8.8 | - | No | 2021-07-20 |
| CVE-2025-59874 | HCL Hive Telco Observability is affected by a Required directives missing from the CSP . | high | 8.1 | - | No | 2026-06-04 |

## Frequently asked questions

### What is CWE-1027?

Weaknesses in this category are related to the A1 category in the OWASP Top Ten 2017.

### What CVEs are caused by CWE-1027?

2 recorded CVEs are attributed to CWE-1027, including CVE-2021-27021 and CVE-2025-59874.

### Is CWE-1027 actively exploited?

2 recorded CVEs are caused by CWE-1027; none are currently in CISA's KEV catalog of actively exploited flaws.

Primary source: [MITRE CWE](https://cwe.mitre.org/data/definitions/1027.html)

---

Source: [RadicalNotion.AI](https://radicalnotion.ai/cwe/cwe-1027). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.