Product by X-stream
Xstream
32 known vulnerabilities in Xstream (X-stream), 1 of them actively exploited (CISA KEV).
Key figures
32
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
8
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-39144 | XStream is vulnerable to a Remote Command Execution attack In CISA KEValso in 16 other products | 8.5 | |
| High | CVE-2020-26217 | Remote Code Execution in XStream | 8.0 | |
| High | CVE-2021-39141 | XStream is vulnerable to an Arbitrary Code Execution attack | 8.5 | |
| High | CVE-2021-39146 | XStream is vulnerable to an Arbitrary Code Execution attack | 8.5 | |
| High | CVE-2021-21341 | XStream can cause a Denial of Service | 7.5 | |
| High | CVE-2021-29505 | XStream is vulnerable to a Remote Command Execution attack | 7.5 | |
| High | CVE-2021-39152 | A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling | 8.5 | |
| High | CVE-2022-41966 | XStream Denial of Service via stack overflow | 8.2 | |
| Medium | CVE-2020-26259 | XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling | 6.8 | |
| High | CVE-2020-26258 | Server-Side Forgery Request can be activated unmarshalling with XStream | 6.3 | |
| High | CVE-2021-39149 | XStream is vulnerable to an Arbitrary Code Execution attack | 8.5 | |
| High | CVE-2021-39148 | XStream is vulnerable to an Arbitrary Code Execution attack | 8.5 | |
| High | CVE-2021-39147 | XStream is vulnerable to an Arbitrary Code Execution attack | 8.5 | |
| High | CVE-2021-39151 | XStream is vulnerable to an Arbitrary Code Execution attack | 8.5 | |
| High | CVE-2021-39154 | XStream is vulnerable to an Arbitrary Code Execution attack | 8.5 | |
| Critical | CVE-2021-21346 | XStream is vulnerable to an Arbitrary Code Execution attack | 6.1 | |
| High | CVE-2021-43859 | Denial of Service by injecting highly recursive collections or maps in XStream | 7.5 | |
| High | CVE-2021-39139 | XStream is vulnerable to an Arbitrary Code Execution attack | 8.5 | |
| High | CVE-2021-39153 | XStream is vulnerable to an Arbitrary Code Execution attack | 8.5 | |
| High | CVE-2021-21349 | Xstream: Deserialization of Untrusted Data | 6.1 | |
| High | CVE-2021-39145 | XStream is vulnerable to an Arbitrary Code Execution attack | 8.5 | |
| Critical | CVE-2021-21345 | XStream is vulnerable to a Remote Command Execution attack | 5.8 | |
| Critical | CVE-2021-21351 | XStream is vulnerable to an Arbitrary Code Execution attack | 5.4 | |
| High | CVE-2021-39150 | A Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling | 8.5 | |
| Critical | CVE-2021-21344 | XStream is vulnerable to an Arbitrary Code Execution attack | 5.3 |