BA
Product
Business Activity Monitoring
On CISA KEVExploited in the wild
29
CVEs
1
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 8High 19Medium 2Low 0
Watch
Add Business Activity Monitoring to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-21345 | 9.9 | Mar 22 | XStream is vulnerable to a Remote Command Execution attack Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2021-21350 | 9.8 | Mar 22 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2021-21344 | 9.8 | Mar 22 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2021-21346 | 9.8 | Mar 22 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2021-21347 | 9.8 | Mar 22 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2019-10173 | 9.8 | Jul 23 | It was found that xstream API version 1.4.10 before 1.4.11 introduced a regression for a previous deserialization flaw Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2021-21351 | 9.1 | Mar 22 | XStream is vulnerable to an Arbitrary Code Execution attack Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2021-21342 | 9.1 | Mar 22 | A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0 |
Showing 8