xpp3 vulnerabilities (SUSE)

4 vulnerabilities.

• xpp3 SUSE Prototype Pollution CVE-2020-28477 Fix available 7.5 HighJanuary 19, 2021
• xpp3 SUSE Server-Side Forgery Request can be activated unmarshalling with XStream CVE-2020-26258 Public exploitFix available EPSS 81.8% 6.3 MediumDecember 16, 2020
• xpp3 SUSE XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling CVE-2020-26259 Public exploitFix available EPSS 82.4% 6.8 MediumDecember 16, 2020
• xpp3 SUSE Remote Code Execution in XStream CVE-2020-26217 Public exploitFix available EPSS 85.0% 8.0 HighNovember 16, 2020