Maven com.thoughtworks.xstream:xstream

Name: Maven com.thoughtworks.xstream:xstream
Brand: Maven

ProduktUS

pkg:maven/com.thoughtworks.xstream/xstream

Ein im Bedrohungsgraphen erfasstes Produkt; die Schwachstellen unten betreffen es bekanntermaßen.

ungepatcht

nach Schweregrad

9critical25high2medium0low

aktualisiert 2026-10-28

Schwachstellen (37)

Zugehörige CVEs.

Sortierung

ID	Schweregrad	EPSS	ausnutzbar	behoben	veröffentlicht	betroffen
CVE-2021-39144US	high8.5OT kritisch	98.1% (100th)	KEV	1.4.18	2021-08-23	< 1.4.18
CVE-2013-7285US	critical9.8	84.4% (100th)	Exploit	1.4.11	2019-05-15	2 Versionen
CVE-2020-26217US	high8.8	82.7% (100th)	Exploit	1.4.14-java7	2020-11-16	< 1.4.14-java7
CVE-2020-26259US	medium6.8	82.4% (100th)	Exploit	1.4.15	2020-12-16	< 1.4.15
CVE-2020-26258US	high7.7	81.8% (100th)	Exploit	1.4.15	2020-12-16	< 1.4.15
CVE-2021-21341US	high7.5	77.8% (100th)	Exploit	1.4.16	2021-03-23	< 1.4.16
CVE-2021-29505US	high8.8	77.2% (100th)	Exploit	1.4.17	2021-05-28	< 1.4.17
CVE-2021-21345US	critical9.9	72.3% (99th)	Exploit	1.4.16	2021-03-23	< 1.4.16
CVE-2021-21349US	high8.6	46.8% (99th)	Exploit	1.4.16	2021-03-23	< 1.4.16
CVE-2021-39141US	high8.5	16.1% (97th)	Exploit	1.4.18	2021-08-23	< 1.4.18
CVE-2022-41966US	high7.5	9.35% (95th)	Exploit	1.4.20	2022-12-28	< 1.4.20
CVE-2019-10173US	critical9.8	95.0% (100th)	—	1.4.11	2019-07-23	1.4.10 → 1.4.11
CVE-2021-21351US	critical9.1	82.1% (100th)	—	1.4.16	2021-03-23	< 1.4.16
CVE-2021-21346US	critical9.8	76.4% (100th)	—	1.4.16	2021-03-23	< 1.4.16
CVE-2021-21344US	critical9.8	76.0% (100th)	—	1.4.16	2021-03-23	< 1.4.16
CVE-2021-21342US	critical9.1	50.0% (99th)	—	1.4.16	2021-03-23	< 1.4.16
CVE-2021-21343US	high7.5	46.7% (99th)	—	1.4.16	2021-03-23	< 1.4.16
CVE-2021-21350US	critical9.8	15.2% (97th)	—	1.4.16	2021-03-23	< 1.4.16
CVE-2021-21347US	critical9.8	14.3% (97th)	—	1.4.16	2021-03-23	< 1.4.16
CVE-2021-39146US	high8.5	14.3% (97th)	—	1.4.18	2021-08-23	< 1.4.18
CVE-2021-21348US	high7.5	13.8% (97th)	—	1.4.16	2021-03-23	< 1.4.16
CVE-2021-39152US	high8.5	11.4% (96th)	—	1.4.18	2021-08-23	< 1.4.18
CVE-2016-3674US	high7.5	8.18% (95th)	—	1.4.9	2016-05-17	< 1.4.9
CVE-2021-43859US	high7.5	7.93% (95th)	—	1.4.19	2022-02-01	< 1.4.19
CVE-2021-39140US	medium6.3	5.92% (93rd)	—	1.4.18	2021-08-23	< 1.4.18
CVE-2017-7957US	high7.5	4.93% (92nd)	—	1.4.10	2017-04-29	< 1.4.10
CVE-2021-39154US	high8.5	4.74% (92nd)	—	1.4.18	2021-08-23	< 1.4.18
CVE-2021-39151US	high8.5	4.74% (92nd)	—	1.4.18	2021-08-23	< 1.4.18
CVE-2021-39149US	high8.5	4.74% (92nd)	—	1.4.18	2021-08-23	< 1.4.18
CVE-2021-39148US	high8.5	4.74% (92nd)	—	1.4.18	2021-08-23	< 1.4.18
CVE-2021-39147US	high8.5	4.74% (92nd)	—	1.4.18	2021-08-23	< 1.4.18
CVE-2021-39139US	high8.8	4.54% (92nd)	—	1.4.18	2021-08-23	< 1.4.18
CVE-2021-39153US	high8.5	4.46% (91st)	—	1.4.18	2021-08-23	< 1.4.18
CVE-2021-39145US	high8.5	4.06% (91st)	—	1.4.18	2021-08-23	< 1.4.18
CVE-2021-39150US	high8.5	3.44% (89th)	—	1.4.18	2021-08-23	< 1.4.18
CVE-2022-40151US	high7.5	2.22% (83rd)	—	1.4.20	2022-09-16	< 1.4.20
CVE-2024-47072US	—	2.00% (81st)	—	1.4.21	2024-11-08	< 1.4.21

Schwächen (8)

Die Schwächeklassen (CWEs), die die meisten dieser CVEs teilen.

CWE-502Deserialization of Untrusted Data31 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type15 CVEs
CWE-918Server-Side Request Forgery (SSRF)5 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')4 CVEs
CWE-121Stack-based Buffer Overflow3 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')2 CVEs

Datenquellen (1)

Welche Quellen diesen Datensatz belegen und wann.

USOSV.dev37 CVEs

scry

Produkte tragen bekannte Schwachstellen, sobald sie im Internet exponiert sind. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan