x-stream xstream
32 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-47072 | < 1.4.21 | XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream | HIGH 7.5 | 2.0 % | ||
| CVE-2022-41966 | < 1.4.20 | XStream Denial of Service via stack overflow | HIGH 8.2 | 9.3 % | ||
| CVE-2021-43859 | < 1.4.19 | Denial of Service by injecting highly recursive collections or maps in XStream | HIGH 7.5 | 7.9 % | ||
| CVE-2021-39150 | < 1.4.18 | A Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling | HIGH 8.5 | 3.4 % | ||
| CVE-2021-39152 | < 1.4.18 | A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling | HIGH 8.5 | 11 % | ||
| CVE-2021-39140 | < 1.4.18 | XStream can cause a Denial of Service | MEDIUM 6.5 | 5.9 % | ||
| CVE-2021-39149 | < 1.4.18 | XStream is vulnerable to an Arbitrary Code Execution attack | HIGH 8.5 | 4.7 % | ||
| CVE-2021-39148 | < 1.4.18 | XStream is vulnerable to an Arbitrary Code Execution attack | HIGH 8.5 | 4.7 % | ||
| CVE-2021-39147 | < 1.4.18 | XStream is vulnerable to an Arbitrary Code Execution attack | HIGH 8.5 | 4.7 % | ||
| CVE-2021-39146 | < 1.4.18 | XStream is vulnerable to an Arbitrary Code Execution attack | HIGH 8.5 | 14 % | ||
| CVE-2021-39145 | < 1.4.18 | XStream is vulnerable to an Arbitrary Code Execution attack | HIGH 8.5 | 4.1 % | ||
| CVE-2021-39141 | < 1.4.18 | XStream is vulnerable to an Arbitrary Code Execution attack | HIGH 8.5 | 16 % | ||
| CVE-2021-39153 | < 1.4.18 | XStream is vulnerable to an Arbitrary Code Execution attack | HIGH 8.5 | 4.5 % | ||
| CVE-2021-39151 | < 1.4.18 | XStream is vulnerable to an Arbitrary Code Execution attack | HIGH 8.5 | 4.7 % | ||
| CVE-2021-39139 | < 1.4.18 | XStream is vulnerable to an Arbitrary Code Execution attack | HIGH 8.8 | 4.5 % | ||
| CVE-2021-39154 | < 1.4.18 | XStream is vulnerable to an Arbitrary Code Execution attack | HIGH 8.5 | 4.7 % | ||
| CVE-2021-39144 | < 1.4.18 | XStream is vulnerable to a Remote Command Execution attack | HIGH 8.5 | 98 % | KEV | |
| CVE-2021-29505 | < 1.4.17 | XStream is vulnerable to a Remote Command Execution attack | HIGH 8.8 | 77 % | ||
| CVE-2021-21348 | < 1.4.16 | XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos) | HIGH 7.5 | 14 % | ||
| CVE-2021-21349 | < 1.4.16 | A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a reso… | HIGH 8.6 | 47 % | ||
| CVE-2021-21350 | < 1.4.16 | XStream is vulnerable to an Arbitrary Code Execution attack | CRITICAL 9.8 | 15 % | ||
| CVE-2021-21351 | < 1.4.16 | XStream is vulnerable to an Arbitrary Code Execution attack | CRITICAL 9.1 | 82 % | ||
| CVE-2021-21341 | < 1.4.16 | XStream can cause a Denial of Service | HIGH 7.5 | 78 % | ||
| CVE-2021-21342 | < 1.4.16 | A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a reso… | CRITICAL 9.1 | 50 % | ||
| CVE-2021-21343 | < 1.4.16 | XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient … | HIGH 7.5 | 47 % | ||
| CVE-2021-21344 | < 1.4.16 | XStream is vulnerable to an Arbitrary Code Execution attack | CRITICAL 9.8 | 76 % | ||
| CVE-2021-21345 | < 1.4.16 | XStream is vulnerable to a Remote Command Execution attack | CRITICAL 9.9 | 72 % | ||
| CVE-2021-21346 | < 1.4.16 | XStream is vulnerable to an Arbitrary Code Execution attack | CRITICAL 9.8 | 76 % | ||
| CVE-2021-21347 | < 1.4.16 | XStream is vulnerable to an Arbitrary Code Execution attack | CRITICAL 9.8 | 14 % | ||
| CVE-2020-26258 | < 1.4.15 | Server-Side Forgery Request can be activated unmarshalling with XStream | HIGH 7.7 | 82 % | ||
| CVE-2020-26259 | < 1.4.15 | XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling | MEDIUM 6.8 | 82 % | ||
| CVE-2020-26217 | < 1.4.14 | Remote Code Execution in XStream | HIGH 8.8 | 83 % |