Login Request a demo
XS
Product
XStream
by XStream · last CVE Dec 28, 2022
On CISA KEVExploited in the wild
37
CVEs
1
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities37In the news0Timeline
Severity mix
Critical 9High 26Medium 2Low 0
Severity
All severities37Critical9High26Medium2Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add XStream to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-21345
9.9
72%
Mar 22
XStream is vulnerable to a Remote Command Execution attack
Affected: before 1.4.16
CVE-2021-21350
9.8
15%
Mar 22
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: before 1.4.16
CVE-2021-21344
9.8
76%
Mar 22
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: before 1.4.16
CVE-2021-21346
9.8
76%
Mar 22
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: before 1.4.16
CVE-2021-21347
9.8
14%
Mar 22
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: before 1.4.16
CVE-2019-10173
9.8
95%
Jul 23
It was found that xstream API version 1.4.10 before 1.4.11 introduced a regression for a previous deserialization flaw
Affected: 1.4.10
CVE-2013-7285
9.8
84%
May 15
Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run arbitrary shell commands by…
Affected: through 1.4.6; 1.4.10
CVE-2021-21351
9.1
82%
Mar 22
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: before 1.4.16
CVE-2021-21342
9.1
50%
Mar 22
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
Affected: before 1.4.16
Showing 9