Security
فارسی
All products

Red Hat JBoss SOA Platform 5/xstream

Red Hat · Package
31 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local hostCVE-2021-39152 · GHSA-XW4P-CRPJ-VJX2 com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat High Fix reported
Server-Side Forgery Request can be activated unmarshalling with XStreamCVE-2020-26258 · GHSA-4CCH-WXPW-8P28 com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat Medium Fix reported
XStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39148 · GHSA-QRX8-8545-4WG2 com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat High Fix reported
XStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39141 · GHSA-G5W6-MRJ7-75H2 com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat High Fix reported
A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local hostCVE-2021-39150 · GHSA-CXFM-5M4G-X7XP com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat High Fix reported
XStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39146 · GHSA-P8PQ-R894-FM8F com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat High Fix reported
XStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39147 · GHSA-H7V4-7XG3-HXCC com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat High Fix reported
XStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39145 · GHSA-8JRJ-525P-826V com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat High Fix reported
XStream is vulnerable to a Remote Command Execution attackCVE-2021-29505 · GHSA-7CHV-RRW6-W6FC com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat High Fix reported
XStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39151 · GHSA-HPH2-M3G5-XXV4 com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat High Fix reported
XStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39153 · GHSA-2Q8X-2P7F-574V com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat High Fix reported
XStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39139 · GHSA-64XX-CQ4Q-MF44 com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat High Fix reported
XStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39149 · GHSA-3CCQ-5VW3-2P6X com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat High Fix reported
XStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39154 · GHSA-6W62-HX7R-MW68 com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat High Fix reported
XStream can cause a Denial of ServiceCVE-2021-39140 · GHSA-6WF9-JMG9-VXCC com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat Medium Fix reported
XStream is vulnerable to a Remote Command Execution attackCVE-2021-39144 · GHSA-J9H8-PHRW-H4FH com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat High Fix reported
XStream vulnerable to an Arbitrary File Deletion on the local host when unmarshallingCVE-2020-26259 · GHSA-JFVX-7WRX-43FH com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat Medium Fix reported
Denial of Service by injecting highly recursive collections or maps in XStreamCVE-2021-43859 · GHSA-RMR5-CPV2-VGJF com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat High Fix reported
Denial of service in XStreamCVE-2017-7957 · GHSA-7HWC-46RM-65JH com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat High Fix reported
XML External Entity Injection in XStreamCVE-2016-3674 · GHSA-RGH3-987H-WPMW com.thoughtworks.xstream:xstreamRed Hat BPM Suite 6/xstream MavenRed Hat High Fix reported