X
Vendor security profile1 actively exploited CVEs
XStream
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs32
Critical1
CISA KEV1
Public exploit27
Patch rate%81
Avg. CVSS7.3
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
0
0
CVE KEV
CVE severity distribution
32toplam CVE
Critical1 (3%)
High17 (53%)
Medium13 (41%)
Uncertain1 (3%)
Patch and exploitation view
%81
Verified patch
%3
CISA KEV
%84
Public exploit
26Patch available
0Partial
1Workaround
0Vendor: no patch
5Unknown
Latest vulnerabilities
-
CVE-2021-39144 Actively exploitedXStream Remote Code Execution Vulnerability
Workaround Public Exploits:1EPSS %98
8.5
8.5
CVE-2021-39152A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling
Patch verified Public Exploits:1EPSS %11
6.5
CVE-2021-39140XStream can cause a Denial of Service
Patch verifiedEPSS %6
8.5
CVE-2021-39149XStream is vulnerable to an Arbitrary Code Execution attack
Patch verifiedEPSS %5
8.5
CVE-2021-39148XStream is vulnerable to an Arbitrary Code Execution attack
Patch verifiedEPSS %5
8.5
CVE-2021-39147XStream is vulnerable to an Arbitrary Code Execution attack
Patch verifiedEPSS %5
8.5
CVE-2021-39146XStream is vulnerable to an Arbitrary Code Execution attack
Patch verified Public Exploits:1EPSS %14
8.5
CVE-2021-39145XStream is vulnerable to an Arbitrary Code Execution attack
Patch verifiedEPSS %4
8.5
CVE-2021-39141XStream is vulnerable to an Arbitrary Code Execution attack
Patch verified Public Exploits:1EPSS %16