CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-29505

XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types is affected. The vulnerability is patched in version 1.4.17.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.92

EPSS Ranking 99.7%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 6.5

References

Products affected by CVE-2021-29505

Netapp » Snapmanager » Version: N/A

cpe:2.3:a:netapp:snapmanager:-
Oracle » Banking Cash Management » Version: 14.2

cpe:2.3:a:oracle:banking_cash_management:14.2
Oracle » Banking Cash Management » Version: 14.3

cpe:2.3:a:oracle:banking_cash_management:14.3
Oracle » Banking Cash Management » Version: 14.5

cpe:2.3:a:oracle:banking_cash_management:14.5
Oracle » Banking Corporate Lending Process Management » Version: 14.2.0

cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.2.0
Oracle » Banking Corporate Lending Process Management » Version: 14.3.0

cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.3.0
Oracle » Banking Corporate Lending Process Management » Version: 14.5.0

cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.5.0
Oracle » Banking Credit Facilities Process Management » Version: 14.2.0

cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.2.0
Oracle » Banking Credit Facilities Process Management » Version: 14.3.0

cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.3.0
Oracle » Banking Credit Facilities Process Management » Version: 14.5.0

cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.5.0
Oracle » Banking Supply Chain Finance » Version: 14.2.0

cpe:2.3:a:oracle:banking_supply_chain_finance:14.2.0
Oracle » Banking Trade Finance Process Management » Version: 14.5.0

cpe:2.3:a:oracle:banking_trade_finance_process_management:14.5.0
Oracle » Business Activity Monitoring » Version: 11.1.1.9.0

cpe:2.3:a:oracle:business_activity_monitoring:11.1.1.9.0
Oracle » Business Activity Monitoring » Version: 12.2.1.3.0

cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.3.0
Oracle » Business Activity Monitoring » Version: 12.2.1.4.0

cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.4.0
Oracle » Communications Brm - Elastic Charging Engine » Version: 11.3

cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:11.3
Oracle » Communications Brm - Elastic Charging Engine » Version: 12.0

cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:12.0
Oracle » Communications Unified Inventory Management » Version: 7.3.4

cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.4
Oracle » Communications Unified Inventory Management » Version: 7.3.5

cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.5
Oracle » Communications Unified Inventory Management » Version: 7.4.0

cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.0
Oracle » Communications Unified Inventory Management » Version: 7.4.1

cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.1
Oracle » Communications Unified Inventory Management » Version: 7.4.2

cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.2
Oracle » Enterprise Manager Ops Center » Version: 12.4.0.0

cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0
Oracle » Retail Xstore Point Of Service » Version: 16.0.6

cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.6
Oracle » Retail Xstore Point Of Service » Version: 17.0.4

cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4
Oracle » Retail Xstore Point Of Service » Version: 18.0.3

cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3
Oracle » Retail Xstore Point Of Service » Version: 19.0.2

cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2
Oracle » Retail Xstore Point Of Service » Version: 20.0.1

cpe:2.3:a:oracle:retail_xstore_point_of_service:20.0.1
Oracle » Webcenter Portal » Version: 12.2.1.3.0

cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0
Oracle » Webcenter Portal » Version: 12.2.1.4.0

cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0
Oracle » Webcenter Sites » Version: 12.2.1.3.0

cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0
Oracle » Webcenter Sites » Version: 12.2.1.4.0

cpe:2.3:a:oracle:webcenter_sites:12.2.1.4.0
Xstream Project » Xstream » Version: N/A

cpe:2.3:a:xstream_project:xstream:-
Xstream Project » Xstream » Version: 0.2

cpe:2.3:a:xstream_project:xstream:0.2
Xstream Project » Xstream » Version: 0.3

cpe:2.3:a:xstream_project:xstream:0.3
Xstream Project » Xstream » Version: 0.4

cpe:2.3:a:xstream_project:xstream:0.4
Xstream Project » Xstream » Version: 0.5

cpe:2.3:a:xstream_project:xstream:0.5
Xstream Project » Xstream » Version: 0.6

cpe:2.3:a:xstream_project:xstream:0.6
Xstream Project » Xstream » Version: 1.0

cpe:2.3:a:xstream_project:xstream:1.0
Xstream Project » Xstream » Version: 1.0.1

cpe:2.3:a:xstream_project:xstream:1.0.1
Xstream Project » Xstream » Version: 1.0.2

cpe:2.3:a:xstream_project:xstream:1.0.2
Xstream Project » Xstream » Version: 1.1

cpe:2.3:a:xstream_project:xstream:1.1
Xstream Project » Xstream » Version: 1.1.1

cpe:2.3:a:xstream_project:xstream:1.1.1
Xstream Project » Xstream » Version: 1.1.2

cpe:2.3:a:xstream_project:xstream:1.1.2
Xstream Project » Xstream » Version: 1.1.3

cpe:2.3:a:xstream_project:xstream:1.1.3
Xstream Project » Xstream » Version: 1.2

cpe:2.3:a:xstream_project:xstream:1.2
Xstream Project » Xstream » Version: 1.2.1

cpe:2.3:a:xstream_project:xstream:1.2.1
Xstream Project » Xstream » Version: 1.2.2

cpe:2.3:a:xstream_project:xstream:1.2.2
Xstream Project » Xstream » Version: 1.3

cpe:2.3:a:xstream_project:xstream:1.3
Xstream Project » Xstream » Version: 1.3.1

cpe:2.3:a:xstream_project:xstream:1.3.1
Xstream Project » Xstream » Version: 1.4

cpe:2.3:a:xstream_project:xstream:1.4
Xstream Project » Xstream » Version: 1.4.1

cpe:2.3:a:xstream_project:xstream:1.4.1
Xstream Project » Xstream » Version: 1.4.10

cpe:2.3:a:xstream_project:xstream:1.4.10
Xstream Project » Xstream » Version: 1.4.11

cpe:2.3:a:xstream_project:xstream:1.4.11
Xstream Project » Xstream » Version: 1.4.11.1

cpe:2.3:a:xstream_project:xstream:1.4.11.1
Xstream Project » Xstream » Version: 1.4.12

cpe:2.3:a:xstream_project:xstream:1.4.12
Xstream Project » Xstream » Version: 1.4.13

cpe:2.3:a:xstream_project:xstream:1.4.13
Xstream Project » Xstream » Version: 1.4.14

cpe:2.3:a:xstream_project:xstream:1.4.14
Xstream Project » Xstream » Version: 1.4.15

cpe:2.3:a:xstream_project:xstream:1.4.15
Xstream Project » Xstream » Version: 1.4.16

cpe:2.3:a:xstream_project:xstream:1.4.16
Xstream Project » Xstream » Version: 1.4.2

cpe:2.3:a:xstream_project:xstream:1.4.2
Xstream Project » Xstream » Version: 1.4.3

cpe:2.3:a:xstream_project:xstream:1.4.3
Xstream Project » Xstream » Version: 1.4.4

cpe:2.3:a:xstream_project:xstream:1.4.4
Xstream Project » Xstream » Version: 1.4.5

cpe:2.3:a:xstream_project:xstream:1.4.5
Xstream Project » Xstream » Version: 1.4.6

cpe:2.3:a:xstream_project:xstream:1.4.6
Xstream Project » Xstream » Version: 1.4.7

cpe:2.3:a:xstream_project:xstream:1.4.7
Xstream Project » Xstream » Version: 1.4.8

cpe:2.3:a:xstream_project:xstream:1.4.8
Xstream Project » Xstream » Version: 1.4.9

cpe:2.3:a:xstream_project:xstream:1.4.9
Debian » Debian Linux » Version: 10.0

cpe:2.3:o:debian:debian_linux:10.0
Debian » Debian Linux » Version: 11.0

cpe:2.3:o:debian:debian_linux:11.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0
Fedoraproject » Fedora » Version: 33

cpe:2.3:o:fedoraproject:fedora:33
Fedoraproject » Fedora » Version: 34

cpe:2.3:o:fedoraproject:fedora:34
Fedoraproject » Fedora » Version: 35

cpe:2.3:o:fedoraproject:fedora:35

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-29505

Products

Pricing

Contact Us