CVE-2021-39144 CISA KEV · Actively exploited
XStream Remote Code Execution Vulnerability
CVSS score
—
EPSS probability
%98.1
Risk score
—
Published
3 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
{VMware Cloud Foundation} remote code execution vulnerability via XStream (CVE-2021-39144) (★0)
Makefile Go / Python
Nuclei: XStream 1.4.18 - Remote Code Execution
Makefile Go / Python
Similar Vulnerabilities
9.8
CVE-2013-7285Vulnerability in N/a
Patch status unknown Public Exploits:2EPSS %84
8.0
CVE-2020-26217Remote Code Execution in XStream
Patch verified Public Exploits:4EPSS %85
7.5
CVE-2021-21341XStream can cause a Denial of Service
Patch verified Public Exploits:1EPSS %78
7.5
CVE-2021-29505XStream is vulnerable to a Remote Command Execution attack
Patch verified Public Exploits:1EPSS %77
6.8
CVE-2020-26259XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling
Patch status unknownEPSS %82
6.3
CVE-2020-26258Server-Side Forgery Request can be activated unmarshalling with XStream
Patch status unknown Public Exploits:1EPSS %82
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2021-39144"