x-stream xstream vulnerabilities

CVEs per yearBy the year they were published

1. 20203
2. 20221
3. 202227
4. 20241

Known exploitedNewest addition to KEV first

• CVE-2021-39144

  XStream is vulnerable to a Remote Command Execution attack

  x-stream · xstream

  ExploitedHigh8.5

Newest CVEs

• CVE-2024-47072

  XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream

  x-stream · xstream

  High7.5
• CVE-2022-41966

  XStream Denial of Service via stack overflow

  x-stream · xstream

  High8.2
• CVE-2021-43859

  Denial of Service by injecting highly recursive collections or maps in XStream

  x-stream · xstream

  High7.5
• CVE-2021-39150

  A Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling

  x-stream · xstream

  High8.5
• CVE-2021-39152

  A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling

  x-stream · xstream

  High8.5
• CVE-2021-39140

  XStream can cause a Denial of Service

  x-stream · xstream

  Medium6.5
• CVE-2021-39149

  XStream is vulnerable to an Arbitrary Code Execution attack

  x-stream · xstream

  High8.5
• CVE-2021-39148

  XStream is vulnerable to an Arbitrary Code Execution attack

  x-stream · xstream

  High8.5
• CVE-2021-39147

  XStream is vulnerable to an Arbitrary Code Execution attack

  x-stream · xstream

  High8.5
• CVE-2021-39146

  XStream is vulnerable to an Arbitrary Code Execution attack

  x-stream · xstream

  High8.5