Xstream vulnerabilities

Products

• Xstream 37

Newest

• x-stream xstream XStream Denial of Service via stack overflow CVE-2022-41966 Public exploitFix available 8.2 HighDecember 27, 2022
• fasterxml woodstox, xstream +1 more Stack Buffer Overflow in Woodstox CVE-2022-40152 Fix available EPSS 18.2% 6.5 MediumSeptember 16, 2022
• x-stream xstream Stack Buffer Overflow in xstream CVE-2022-40151 Fix available 6.5 MediumSeptember 16, 2022
• x-stream xstream, debian linux, fedoraproject fedora +8 more +10 more Denial of Service by injecting highly recursive collections or maps in XStream CVE-2021-43859 Fix available 7.5 HighFebruary 1, 2022
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more A Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling CVE-2021-39150 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling CVE-2021-39152 Fix available EPSS 11.4% 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream can cause a Denial of Service CVE-2021-39140 Fix available 6.5 MediumAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39149 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39148 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39147 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39146 Fix available EPSS 14.3% 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39145 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39141 Public exploitFix available EPSS 16.1% 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +10 more +12 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39153 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39151 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39139 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-39154 Fix available 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to a Remote Command Execution attack CVE-2021-39144 In KEVPublic exploitFix available EPSS 98.1% 8.5 HighAugust 23, 2021
• x-stream xstream, debian linux, fedoraproject fedora +14 more +16 more XStream is vulnerable to a Remote Command Execution attack CVE-2021-29505 Public exploitFix available EPSS 77.2% 7.5 HighMay 18, 2021
• x-stream xstream, apache activemq, jmeter +13 more +15 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-21351 Fix available EPSS 82.1% 5.4 MediumMarch 22, 2021
• x-stream xstream, apache activemq, jmeter +13 more +15 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-21350 Fix available EPSS 15.2% 5.3 MediumMarch 22, 2021
• x-stream xstream, apache activemq, jmeter +14 more +16 more A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host CVE-2021-21349 Public exploitFix available EPSS 46.8% 6.1 MediumMarch 22, 2021
• x-stream xstream, apache activemq, jmeter +13 more +15 more XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos) CVE-2021-21348 Fix available EPSS 13.8% 5.3 MediumMarch 22, 2021
• x-stream xstream, apache activemq, jmeter +13 more +15 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-21347 Fix available EPSS 14.3% 6.1 MediumMarch 22, 2021
• x-stream xstream, apache activemq, jmeter +13 more +15 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-21346 Fix available EPSS 76.4% 6.1 MediumMarch 22, 2021
• x-stream xstream, apache activemq, jmeter +13 more +15 more XStream is vulnerable to a Remote Command Execution attack CVE-2021-21345 Public exploitFix available EPSS 72.3% 5.8 MediumMarch 22, 2021
• x-stream xstream, apache activemq, jmeter +13 more +15 more XStream is vulnerable to an Arbitrary Code Execution attack CVE-2021-21344 Fix available EPSS 76.0% 5.3 MediumMarch 22, 2021
• x-stream xstream, apache activemq, jmeter +12 more +14 more XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights CVE-2021-21343 Fix available EPSS 46.7% 5.3 MediumMarch 22, 2021
• x-stream xstream, apache activemq, jmeter +12 more +14 more A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host CVE-2021-21342 Fix available EPSS 50.0% 5.3 MediumMarch 22, 2021
• x-stream xstream, apache activemq, jmeter +10 more +12 more XStream can cause a Denial of Service CVE-2021-21341 Public exploitFix available EPSS 77.8% 7.5 HighMarch 22, 2021
• x-stream xstream, apache struts, debian linux +1 more +3 more Server-Side Forgery Request can be activated unmarshalling with XStream CVE-2020-26258 Public exploitFix available EPSS 81.8% 6.3 MediumDecember 16, 2020
• x-stream xstream, apache struts, debian linux +1 more +3 more XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling CVE-2020-26259 Public exploitFix available EPSS 82.4% 6.8 MediumDecember 16, 2020
• x-stream xstream, apache activemq, debian linux +12 more +14 more Remote Code Execution in XStream CVE-2020-26217 Public exploitFix available EPSS 82.7% 8.0 HighNovember 16, 2020
• x-stream xstream, oracle banking platform, business activity monitoring +7 more +9 more Deserialization of Untrusted Data and Code Injection in xstream CVE-2019-10173 Fix available EPSS 95.0% 7.3 HighJuly 23, 2019
• xstream, debian linux, redhat fuse +1 more +3 more Denial of service in XStream CVE-2017-7957 Fix available 7.5 HighApril 29, 2017
• xstream, debian linux, fedoraproject fedora +1 more +3 more XML External Entity Injection in XStream CVE-2016-3674 Fix available 7.5 HighMay 5, 2016
• xstream, apache activemq, oracle endeca information discovery studio +2 more Command Injection in Xstream CVE-2013-7285 Public exploitFix available EPSS 84.4% 9.8 CriticalFebruary 25, 2014