Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

xstream project xstream vulnerabilities and exploits

(subscribe to this query)

7.5
CVSSv3
CVE-2021-43859
XStream is an open source java library to serialize objects to XML and back again. Versions prior to 1.4.19 may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service...
Xstream Project XstreamFedoraproject Fedora 34Fedoraproject Fedora 35Debian Debian Linux 9.0
8.5
CVSSv3
CVE-2021-39152
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to request data from internal resources that are not publicly available only by manipulating the processed input stream with a Java runtime...
Xstream Project XstreamFedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Snapmanager -Oracle Business Activity Monitoring 12.2.1.4.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0Oracle Communications Cloud Native Core Binding Support Function 1.10.0Oracle Communications Cloud Native Core Policy 1.14.0Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Communications Unified Inventory Management 7.4.1Oracle Communications Unified Inventory Management 7.4.2Oracle Utilities Framework 4.2.0.2.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.3.0.1.0Oracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Utilities Framework 4.4.0.2.0Oracle Utilities Framework 4.4.0.3.0Oracle Utilities Testing Accelerator 6.0.0.1.1
6.3
CVSSv3
CVE-2021-39140
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of...
Xstream Project XstreamDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Netapp Snapmanager -Oracle Business Activity Monitoring 12.2.1.4.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0Oracle Communications Cloud Native Core Binding Support Function 1.10.0Oracle Communications Cloud Native Core Policy 1.14.0Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Communications Unified Inventory Management 7.4.1Oracle Communications Unified Inventory Management 7.4.2Oracle Utilities Framework 4.2.0.2.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.3.0.1.0Oracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Utilities Framework 4.4.0.2.0Oracle Utilities Framework 4.4.0.3.0Oracle Utilities Testing Accelerator 6.0.0.1.1
8.5
CVSSv3
CVE-2021-39150
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to request data from internal resources that are not publicly available only by manipulating the processed input stream with a Java runtime...
Xstream Project XstreamFedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Snapmanager -Oracle Business Activity Monitoring 12.2.1.4.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0Oracle Communications Cloud Native Core Binding Support Function 1.10.0Oracle Communications Cloud Native Core Policy 1.14.0Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Communications Unified Inventory Management 7.4.1Oracle Communications Unified Inventory Management 7.4.2Oracle Utilities Framework 4.2.0.2.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.3.0.1.0Oracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Utilities Framework 4.4.0.2.0Oracle Utilities Framework 4.4.0.3.0Oracle Utilities Testing Accelerator 6.0.0.1.1
8.5
CVSSv3
CVE-2021-39146
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed...
Xstream Project XstreamFedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Snapmanager -Oracle Business Activity Monitoring 12.2.1.4.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0Oracle Communications Cloud Native Core Binding Support Function 1.10.0Oracle Communications Cloud Native Core Policy 1.14.0Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Communications Unified Inventory Management 7.4.1Oracle Communications Unified Inventory Management 7.4.2Oracle Utilities Framework 4.2.0.2.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.3.0.1.0Oracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Utilities Framework 4.4.0.2.0Oracle Utilities Framework 4.4.0.3.0Oracle Utilities Testing Accelerator 6.0.0.1.1
8.5
CVSSv3
CVE-2021-39149
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed...
Xstream Project XstreamFedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Snapmanager -Oracle Business Activity Monitoring 12.2.1.4.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0Oracle Communications Cloud Native Core Binding Support Function 1.10.0Oracle Communications Cloud Native Core Policy 1.14.0Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Communications Unified Inventory Management 7.4.1Oracle Communications Unified Inventory Management 7.4.2Oracle Utilities Framework 4.2.0.2.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.3.0.1.0Oracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Utilities Framework 4.4.0.2.0Oracle Utilities Framework 4.4.0.3.0Oracle Utilities Testing Accelerator 6.0.0.1.1
8.8
CVSSv3
CVE-2021-39139
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. A user is only affected if using the...
Xstream Project XstreamDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Netapp Snapmanager -Oracle Business Activity Monitoring 12.2.1.4.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0Oracle Communications Cloud Native Core Binding Support Function 1.10.0Oracle Communications Cloud Native Core Policy 1.14.0Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Communications Unified Inventory Management 7.4.1Oracle Communications Unified Inventory Management 7.4.2Oracle Utilities Framework 4.2.0.2.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.3.0.1.0Oracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Utilities Framework 4.4.0.2.0Oracle Utilities Framework 4.4.0.3.0Oracle Utilities Testing Accelerator 6.0.0.1.1
8.5
CVSSv3
CVE-2021-39148
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed...
Xstream Project XstreamFedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Snapmanager -Oracle Business Activity Monitoring 12.2.1.4.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0Oracle Communications Cloud Native Core Binding Support Function 1.10.0Oracle Communications Cloud Native Core Policy 1.14.0Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Communications Unified Inventory Management 7.4.1Oracle Communications Unified Inventory Management 7.4.2Oracle Utilities Framework 4.2.0.2.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.3.0.1.0Oracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Utilities Framework 4.4.0.2.0Oracle Utilities Framework 4.4.0.3.0Oracle Utilities Testing Accelerator 6.0.0.1.1
8.5
CVSSv3
CVE-2021-39154
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed...
Xstream Project XstreamFedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Debian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Netapp Snapmanager -Oracle Business Activity Monitoring 12.2.1.4.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0Oracle Communications Cloud Native Core Binding Support Function 1.10.0Oracle Communications Cloud Native Core Policy 1.14.0Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Communications Unified Inventory Management 7.4.1Oracle Communications Unified Inventory Management 7.4.2Oracle Utilities Framework 4.2.0.2.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.3.0.1.0Oracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Utilities Framework 4.4.0.2.0Oracle Utilities Framework 4.4.0.3.0Oracle Utilities Testing Accelerator 6.0.0.1.1
8.5
CVSSv3
CVE-2021-39145
XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed...
Xstream Project XstreamDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Netapp Snapmanager -Oracle Business Activity Monitoring 12.2.1.4.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0Oracle Communications Cloud Native Core Binding Support Function 1.10.0Oracle Communications Cloud Native Core Policy 1.14.0Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Communications Unified Inventory Management 7.4.1Oracle Communications Unified Inventory Management 7.4.2Oracle Utilities Framework 4.2.0.2.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.3.0.1.0Oracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Utilities Framework 4.4.0.2.0Oracle Utilities Framework 4.4.0.3.0Oracle Utilities Testing Accelerator 6.0.0.1.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-30600CVE-2022-30138HTML injectionCVE-2022-28924malicious code‎open redirectCVE-2022-1388CVE-2022-29383CVE-2020-16235
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook