TI-2021-16530 CVE-2021-39144 · GHSA-j9h8-phrw-h4fh
XStream is vulnerable to a Remote Command Execution attack
Priority CRITICAL 96KEV
XStream is a simple library to serialize objects to XML and back again.
RHSA-2022:0297
Red Hat Decision Manager 7.12.0 security update
Released 2022-01-26 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHDM 7.12.0
Fixes 17 records
TI-2021-10213 CVE-2021-29505 · GHSA-7chv-rrw6-w6fc
XStream is vulnerable to a Remote Command Execution attack
Priority HIGH 79
XStream is software for serializing Java objects to XML and back again.
TI-2021-16528 CVE-2021-39141 · GHSA-g5w6-mrj7-75h2
XStream is vulnerable to an Arbitrary Code Execution attack
Priority MEDIUM 61
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16532 CVE-2021-39146 · GHSA-p8pq-r894-fm8f
XStream is vulnerable to an Arbitrary Code Execution attack
Priority MEDIUM 60
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16538 CVE-2021-39152 · GHSA-xw4p-crpj-vjx2
A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling
Priority MEDIUM 56
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16526 CVE-2021-39139 · GHSA-64xx-cq4q-mf44
XStream is vulnerable to an Arbitrary Code Execution attack
Priority MEDIUM 53
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16540 CVE-2021-39154 · GHSA-6w62-hx7r-mw68
XStream is vulnerable to an Arbitrary Code Execution attack
Priority MEDIUM 52
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16539 CVE-2021-39153 · GHSA-2q8x-2p7f-574v
XStream is vulnerable to an Arbitrary Code Execution attack
Priority MEDIUM 52
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16537 CVE-2021-39151 · GHSA-hph2-m3g5-xxv4
XStream is vulnerable to an Arbitrary Code Execution attack
Priority MEDIUM 52
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16535 CVE-2021-39149 · GHSA-3ccq-5vw3-2p6x
XStream is vulnerable to an Arbitrary Code Execution attack
Priority MEDIUM 52
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16534 CVE-2021-39148 · GHSA-qrx8-8545-4wg2
XStream is vulnerable to an Arbitrary Code Execution attack
Priority MEDIUM 52
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16533 CVE-2021-39147 · GHSA-h7v4-7xg3-hxcc
XStream is vulnerable to an Arbitrary Code Execution attack
Priority MEDIUM 52
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16531 CVE-2021-39145 · GHSA-8jrj-525p-826v
XStream is vulnerable to an Arbitrary Code Execution attack
Priority MEDIUM 52
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16536 CVE-2021-39150 · GHSA-cxfm-5m4g-x7xp
A Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling
Priority MEDIUM 51
XStream is a simple library to serialize objects to XML and back again.
TI-2021-16527 CVE-2021-39140 · GHSA-6wf9-jmg9-vxcc
XStream can cause a Denial of Service
Priority MEDIUM 44
XStream is a simple library to serialize objects to XML and back again.
TI-2020-17296 CVE-2020-28491 · GHSA-xmc8-26q4-qjhx
Denial of service (DoS) in com.fasterxml.jackson.dataformat:jackson-dataformat-cbor
Priority LOW 37
This affects the package com.fasterxml.jackson.dataformat:jackson-dataformat-cbor from 0 and before 2.11.4, from 2.12.0-rc1 and before 2.12.1.
TI-2021-03514 CVE-2021-20218 · GHSA-jwh2-ffg4-48xc
Path traversal in fabric8-kubernetes-client
Priority LOW 35
A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after.