Xstream

35 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-41966 Maven HIGH POC PATCH This Week

XStream serializes Java objects to XML and back again. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Java Denial Of Service Buffer Overflow Xstream

NVD GitHub

CVSS 3.1

7.5

EPSS

8.7%

CVE-2022-40152 Maven HIGH POC PATCH THREAT This Week

Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks (DOS) if DTD support is enabled. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Stack Overflow Buffer Overflow Xstream Woodstox

NVD GitHub

CVSS 3.1

7.5

EPSS

19.7%

CVE-2022-40151 Maven HIGH POC PATCH This Week

Those using Xstream to seralize XML data may be vulnerable to Denial of Service attacks (DOS). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Stack Overflow Buffer Overflow Xstream

NVD GitHub

CVSS 3.1

7.5

EPSS

1.0%

CVE-2021-39152 Maven HIGH POC PATCH THREAT This Week

XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.

Deserialization Java Xstream Fedora Debian Linux +12

NVD GitHub

CVSS 3.1

8.5

EPSS

11.5%

CVE-2021-39150 Maven HIGH POC PATCH This Week

XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.

Deserialization Java Xstream Fedora Debian Linux +12

NVD GitHub

CVSS 3.1

8.5

EPSS

3.4%

CVE-2021-39140 Maven MEDIUM POC PATCH This Month

XStream is a simple library to serialize objects to XML and back again. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable. Public exploit code available.

Deserialization Denial Of Service Xstream Debian Linux Fedora +12

NVD GitHub

CVSS 3.1

6.3

EPSS

5.9%

CVE-2021-39154 Maven HIGH POC PATCH This Week

XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.

RCE File Upload Xstream Fedora Debian Linux +12

NVD GitHub

CVSS 3.1

8.5

EPSS

4.7%

CVE-2021-39153 Maven HIGH POC PATCH This Week

XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.

RCE File Upload Java Xstream Fedora +11

NVD GitHub

CVSS 3.1

8.5

EPSS

4.5%

CVE-2021-39151 Maven HIGH POC PATCH This Week

XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.

RCE File Upload Xstream Fedora Debian Linux +12

NVD GitHub

CVSS 3.1

8.5

EPSS

4.7%

CVE-2021-39149 Maven HIGH POC PATCH This Week

XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.

RCE File Upload Xstream Fedora Debian Linux +12

NVD GitHub

CVSS 3.1

8.5

EPSS

4.7%

CVE-2021-39148 Maven HIGH POC PATCH This Week

XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.

RCE File Upload Xstream Fedora Debian Linux +12

NVD GitHub

CVSS 3.1

8.5

EPSS

4.7%

CVE-2021-39147 Maven HIGH POC PATCH This Week

XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.

RCE File Upload Xstream Fedora Debian Linux +12

NVD GitHub

CVSS 3.1

8.5

EPSS

4.7%

CVE-2021-39146 Maven HIGH POC PATCH THREAT This Week

XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. This Unrestricted File Upload vulnerability could allow attackers to upload malicious files that can be executed on the server.

RCE File Upload Xstream Fedora Debian Linux +12

NVD GitHub

CVSS 3.1

8.5

EPSS

14.3%

CVE-2021-39145 Maven HIGH PATCH This Week

RCE File Upload Xstream Debian Linux Fedora +12

NVD GitHub

CVSS 3.1

8.5

EPSS

4.1%

CVE-2021-39144 Maven HIGH POC KEV PATCH THREAT Act Now

XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.

RCE Code Injection Xstream Debian Linux Fedora +12

NVD GitHub

CVSS 3.1

8.5

EPSS

98.1%

CVE-2021-39141 Maven HIGH POC PATCH THREAT This Week

XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.

RCE File Upload Xstream Debian Linux Fedora +12

NVD GitHub

CVSS 3.1

8.5

EPSS

16.1%

CVE-2021-39139 Maven HIGH PATCH This Week

XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. This Unrestricted File Upload vulnerability could allow attackers to upload malicious files that can be executed on the server.

RCE File Upload Java Xstream Debian Linux +13

NVD GitHub

CVSS 3.1

8.8

EPSS

4.5%

CVE-2021-29505 Maven HIGH POC PATCH THREAT This Week

XStream is software for serializing Java objects to XML and back again. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.

RCE Code Injection Java Xstream Debian Linux +15

NVD GitHub

CVSS 3.1

8.8

EPSS

77.7%

CVE-2021-21351 Maven CRITICAL POC PATCH THREAT Act Now

XStream is a Java library to serialize objects to XML and back again. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

RCE File Upload Java Oncommand Insight Activemq +14

NVD GitHub

CVSS 3.1

9.1

EPSS

82.1%

CVE-2021-21350 Maven CRITICAL POC PATCH THREAT Act Now

XStream is a Java library to serialize objects to XML and back again. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

RCE File Upload Java Oncommand Insight Activemq +14

NVD GitHub

CVSS 3.1

9.8

EPSS

15.2%

CVE-2021-21349 Maven HIGH POC PATCH THREAT This Week

XStream is a Java library to serialize objects to XML and back again. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Deserialization Java Oncommand Insight Activemq Jmeter +14

NVD GitHub

CVSS 3.1

8.6

EPSS

46.8%

CVE-2021-21348 Maven HIGH PATCH This Week

XStream is a Java library to serialize objects to XML and back again. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Java Oncommand Insight Activemq Jmeter +13

NVD GitHub

CVSS 3.1

7.5

EPSS

13.8%

CVE-2021-21347 Maven CRITICAL POC PATCH THREAT Act Now

RCE File Upload Java Oncommand Insight Activemq +14

NVD GitHub

CVSS 3.1

9.8

EPSS

14.3%

CVE-2021-21346 Maven CRITICAL POC PATCH THREAT Act Now

RCE File Upload Java Oncommand Insight Activemq +14

NVD GitHub

CVSS 3.1

9.8

EPSS

76.4%

CVE-2021-21345 Maven CRITICAL POC PATCH THREAT Act Now

XStream is a Java library to serialize objects to XML and back again. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

RCE Code Injection Java Oncommand Insight Activemq +14

NVD GitHub

CVSS 3.1

9.9

EPSS

72.3%

CVE-2021-21344 Maven CRITICAL POC PATCH THREAT Act Now

RCE File Upload Java Oncommand Insight Activemq +14

NVD GitHub

CVSS 3.1

9.8

EPSS

76.0%

CVE-2021-21343 Maven HIGH POC PATCH THREAT This Week

Code Injection Java Oncommand Insight Activemq Jmeter +12

NVD GitHub

CVSS 3.1

7.5

EPSS

46.7%

CVE-2021-21342 Maven CRITICAL POC PATCH THREAT Act Now

XStream is a Java library to serialize objects to XML and back again. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Deserialization Java Oncommand Insight Activemq Jmeter +12

NVD GitHub

CVSS 3.1

9.1

EPSS

50.0%

CVE-2021-21341 Maven HIGH POC PATCH THREAT This Week

Denial Of Service Java Oncommand Insight Activemq Jmeter +10

NVD GitHub

CVSS 3.1

7.5

EPSS

77.8%

CVE-2020-26259 Maven MEDIUM POC PATCH THREAT This Month

XStream is a Java library to serialize objects to XML and back again. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Java Command Injection Struts Xstream Debian Linux +1

NVD GitHub

CVSS 3.1

6.8

EPSS

82.4%

CVE-2020-26258 Maven HIGH POC PATCH THREAT This Week

XStream is a Java library to serialize objects to XML and back again. Rated high severity (CVSS 7.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Java SSRF Struts Xstream Debian Linux +1

NVD GitHub

CVSS 3.1

7.7

EPSS

82.2%

CVE-2020-26217 Maven HIGH POC PATCH THREAT This Week

XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

RCE Command Injection Xstream Debian Linux Snapmanager +12

NVD GitHub

CVSS 3.1

8.8

EPSS

85.0%

CVE-2019-10173 Maven CRITICAL PATCH Act Now

It was found that xstream API version 1.4.10 before 1.4.11 introduced a regression for a previous deserialization flaw. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.

Code Injection RCE Deserialization Xstream Banking Platform +8

NVD

CVSS 3.1

9.8

EPSS

94.8%

CVE-2017-7957 Maven HIGH PATCH This Week

XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type 'void' during unmarshalling, leading to a remote application. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Fuse Jboss Middleware Xstream Debian Linux

NVD

CVSS 3.1

7.5

EPSS

4.9%

CVE-2016-3674 Maven HIGH PATCH This Week

Multiple XML external entity (XXE) vulnerabilities in the (1) Dom4JDriver, (2) DomDriver, (3) JDomDriver, (4) JDom2Driver, (5) SjsxpDriver, (6) StandardStaxDriver, and (7) WstxDriver drivers in. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XXE Information Disclosure Jboss Middleware Debian Linux Fedora +1

NVD GitHub

CVSS 3.1

7.5

EPSS

8.2%

CVE-2022-41966 Maven

EPSS 9% CVSS 7.5

HIGH POC PATCH This Week

Java Denial Of Service Buffer Overflow +1

NVD GitHub

CVE-2022-40152 Maven

EPSS 20% CVSS 7.5

HIGH POC PATCH THREAT This Week

Denial Of Service Stack Overflow Buffer Overflow +2

NVD GitHub

CVE-2022-40151 Maven

EPSS 1% CVSS 7.5

HIGH POC PATCH This Week

Denial Of Service Stack Overflow Buffer Overflow +1

NVD GitHub

CVE-2021-39152 Maven

EPSS 11% CVSS 8.5

HIGH POC PATCH THREAT This Week

XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.

Deserialization Java Xstream +14

NVD GitHub

CVE-2021-39150 Maven

EPSS 3% CVSS 8.5

HIGH POC PATCH This Week

XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.

Deserialization Java Xstream +14

NVD GitHub

CVE-2021-39140 Maven

EPSS 6% CVSS 6.3

MEDIUM POC PATCH This Month

XStream is a simple library to serialize objects to XML and back again. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable. Public exploit code available.

Deserialization Denial Of Service Xstream +14

NVD GitHub

CVE-2021-39154 Maven

EPSS 5% CVSS 8.5

HIGH POC PATCH This Week

XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.

RCE File Upload Xstream +14

NVD GitHub

CVE-2021-39153 Maven

EPSS 4% CVSS 8.5

HIGH POC PATCH This Week

XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.

RCE File Upload Java +13

NVD GitHub

CVE-2021-39151 Maven

EPSS 5% CVSS 8.5

HIGH POC PATCH This Week

XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.

RCE File Upload Xstream +14

NVD GitHub

CVE-2021-39149 Maven

EPSS 5% CVSS 8.5

HIGH POC PATCH This Week

XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.

RCE File Upload Xstream +14

NVD GitHub

CVE-2021-39148 Maven

EPSS 5% CVSS 8.5

HIGH POC PATCH This Week

XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.

RCE File Upload Xstream +14

NVD GitHub

CVE-2021-39147 Maven

EPSS 5% CVSS 8.5

HIGH POC PATCH This Week

XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.

RCE File Upload Xstream +14

NVD GitHub

CVE-2021-39146 Maven

EPSS 14% CVSS 8.5

HIGH POC PATCH THREAT This Week

RCE File Upload Xstream +14

NVD GitHub

CVE-2021-39145 Maven

EPSS 4% CVSS 8.5

HIGH PATCH This Week

RCE File Upload Xstream +14

NVD GitHub

CVE-2021-39144 Maven

EPSS 98% CVSS 8.5

HIGH POC KEV PATCH THREAT Act Now

XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.

RCE Code Injection Xstream +14

NVD GitHub

CVE-2021-39141 Maven

EPSS 16% CVSS 8.5

HIGH POC PATCH THREAT This Week

XStream is a simple library to serialize objects to XML and back again. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable. Public exploit code available.

RCE File Upload Xstream +14

NVD GitHub

CVE-2021-39139 Maven

EPSS 5% CVSS 8.8

HIGH PATCH This Week

RCE File Upload Java +15

NVD GitHub

CVE-2021-29505 Maven

EPSS 78% CVSS 8.8

HIGH POC PATCH THREAT This Week

RCE Code Injection Java +17

NVD GitHub

CVE-2021-21351 Maven

EPSS 82% CVSS 9.1

CRITICAL POC PATCH THREAT Act Now

RCE File Upload Java +16

NVD GitHub

CVE-2021-21350 Maven

EPSS 15% CVSS 9.8

CRITICAL POC PATCH THREAT Act Now

RCE File Upload Java +16

NVD GitHub

CVE-2021-21349 Maven

EPSS 47% CVSS 8.6

HIGH POC PATCH THREAT This Week

Deserialization Java Oncommand Insight +16

NVD GitHub

CVE-2021-21348 Maven

EPSS 14% CVSS 7.5

HIGH PATCH This Week

Denial Of Service Java Oncommand Insight +15

NVD GitHub

CVE-2021-21347 Maven

EPSS 14% CVSS 9.8

CRITICAL POC PATCH THREAT Act Now

RCE File Upload Java +16

NVD GitHub

CVE-2021-21346 Maven

EPSS 76% CVSS 9.8

CRITICAL POC PATCH THREAT Act Now

RCE File Upload Java +16

NVD GitHub

CVE-2021-21345 Maven

EPSS 72% CVSS 9.9

CRITICAL POC PATCH THREAT Act Now

RCE Code Injection Java +16

NVD GitHub

CVE-2021-21344 Maven

EPSS 76% CVSS 9.8

CRITICAL POC PATCH THREAT Act Now

RCE File Upload Java +16

NVD GitHub

CVE-2021-21343 Maven

EPSS 47% CVSS 7.5

HIGH POC PATCH THREAT This Week

Code Injection Java Oncommand Insight +14

NVD GitHub

CVE-2021-21342 Maven

EPSS 50% CVSS 9.1

CRITICAL POC PATCH THREAT Act Now

Deserialization Java Oncommand Insight +14

NVD GitHub

CVE-2021-21341 Maven

EPSS 78% CVSS 7.5

HIGH POC PATCH THREAT This Week

Denial Of Service Java Oncommand Insight +12

NVD GitHub

CVE-2020-26259 Maven

EPSS 82% CVSS 6.8

MEDIUM POC PATCH THREAT This Month

Java Command Injection Struts +3

NVD GitHub

CVE-2020-26258 Maven

EPSS 82% CVSS 7.7

HIGH POC PATCH THREAT This Week

Java SSRF Struts +3

NVD GitHub

CVE-2020-26217 Maven

EPSS 85% CVSS 8.8

HIGH POC PATCH THREAT This Week

RCE Command Injection Xstream +14

NVD GitHub

CVE-2019-10173 Maven

EPSS 95% CVSS 9.8

CRITICAL PATCH Act Now

Code Injection RCE Deserialization +10

NVD

CVE-2017-7957 Maven

EPSS 5% CVSS 7.5

HIGH PATCH This Week

Denial Of Service Fuse Jboss Middleware +2

NVD

CVE-2016-3674 Maven

EPSS 8% CVSS 7.5

HIGH PATCH This Week

XXE Information Disclosure Jboss Middleware +3

NVD GitHub