Skip to content

Known CVE

XStream < 1.4.16 - Remote Code Execution

XStream before 1.4.16 is susceptible to remote code execution. An attacker who has sufficient rights can execute host commands via manipulating the processed input stream, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorized administrative operations.

CVE-2021-21345

Critical2021CVSS 9.9CWE-78CWE-502

cve2021 · xstream · deserialization · rce · oast · xstream_project · vuln

Verified scans run this check after you prove you own the site.

All known CVEsView the checks catalogNational Vulnerability Database

Scan a website