Medium
CVE-2021-21346
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 37
Reset filters
Medium
CVE-2021-21345
XStream is vulnerable to a Remote Command Execution attack
Medium
CVE-2021-21344
XStream is vulnerable to an Arbitrary Code Execution attack
Medium
CVE-2021-21343
XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights
Medium
CVE-2021-21342
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
High
CVE-2021-21341
XStream can cause a Denial of Service.
Medium
CVE-2020-26258
Server-Side Forgery Request can be activated unmarshalling with XStream
Medium
CVE-2020-26259
XStream vulnerable to an Arbitrary File Deletion on the local host when unmarshalling
High
CVE-2020-26217
XStream can be used for Remote Code Execution
High
CVE-2017-7957
Denial of service in XStream
High
CVE-2016-3674
XML External Entity Injection in XStream
Critical
CVE-2019-10173
Deserialization of Untrusted Data and Code Injection in xstream
Critical
CVE-2013-7285
Command Injection in Xstream
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.