XS
Product
xstream
by x-stream · last CVE Aug 23, 2021
On CISA KEVExploited in the wild
29
CVEs
1
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 7High 20Medium 2Low 0
Watch

Add xstream to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-21345
9.9
72%
Mar 22
XStream is vulnerable to a Remote Command Execution attack
Affected: < 1.4.16
CVE-2021-21350
9.8
15%
Mar 22
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: < 1.4.16
CVE-2021-21344
9.8
76%
Mar 22
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: < 1.4.16
CVE-2021-21346
9.8
76%
Mar 22
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: < 1.4.16
CVE-2021-21347
9.8
14%
Mar 22
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: < 1.4.16
CVE-2021-21351
9.1
82%
Mar 22
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: < 1.4.16
CVE-2021-21342
9.1
50%
Mar 22
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
Affected: < 1.4.16
Showing 7