x-stream xstream

Name: x-stream xstream
Brand: x-stream

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

7critical22high2medium0low

updated 2026-10-27

vulnerabilities (32)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-39144US	high8.5OT critical	98.1% (100th)	KEV	no fix	2021-08-23	≤ < 1.4.18
CVE-2020-26217US	high8.8	82.7% (100th)	Exploit	no fix	2020-11-16	≤ < 1.4.14
CVE-2020-26259US	medium6.8	82.4% (100th)	Exploit	no fix	2020-12-16	≤ < 1.4.15
CVE-2020-26258US	high7.7	81.8% (100th)	Exploit	no fix	2020-12-16	≤ < 1.4.15
CVE-2021-21341US	high7.5	77.8% (100th)	Exploit	no fix	2021-03-23	≤ < 1.4.16
CVE-2021-29505US	high8.8	77.2% (100th)	Exploit	no fix	2021-05-28	≤ < 1.4.17
CVE-2021-21345US	critical9.9	72.3% (99th)	Exploit	no fix	2021-03-23	≤ < 1.4.16
CVE-2021-21349US	high8.6	46.8% (99th)	Exploit	no fix	2021-03-23	≤ < 1.4.16
CVE-2021-39141US	high8.5	16.1% (97th)	Exploit	no fix	2021-08-23	≤ < 1.4.18
CVE-2022-41966US	high7.5	9.01% (95th)	Exploit	no fix	2022-12-28	≤ < 1.4.20
CVE-2021-21351US	critical9.1	82.1% (100th)	—	no fix	2021-03-23	≤ < 1.4.16
CVE-2021-21346US	critical9.8	76.4% (100th)	—	no fix	2021-03-23	≤ < 1.4.16
CVE-2021-21344US	critical9.8	76.0% (100th)	—	no fix	2021-03-23	≤ < 1.4.16
CVE-2021-21342US	critical9.1	50.0% (99th)	—	no fix	2021-03-23	≤ < 1.4.16
CVE-2021-21343US	high7.5	46.7% (99th)	—	no fix	2021-03-23	≤ < 1.4.16
CVE-2021-21350US	critical9.8	15.2% (97th)	—	no fix	2021-03-23	≤ < 1.4.16
CVE-2021-21347US	critical9.8	14.3% (97th)	—	no fix	2021-03-23	≤ < 1.4.16
CVE-2021-39146US	high8.5	14.3% (97th)	—	no fix	2021-08-23	≤ < 1.4.18
CVE-2021-21348US	high7.5	13.8% (96th)	—	no fix	2021-03-23	≤ < 1.4.16
CVE-2021-39152US	high8.5	11.4% (96th)	—	no fix	2021-08-23	≤ < 1.4.18
CVE-2021-43859US	high7.5	7.93% (95th)	—	no fix	2022-02-01	≤ < 1.4.19
CVE-2021-39140US	medium6.3	5.92% (93rd)	—	no fix	2021-08-23	≤ < 1.4.18
CVE-2021-39154US	high8.5	4.74% (92nd)	—	no fix	2021-08-23	≤ < 1.4.18
CVE-2021-39151US	high8.5	4.74% (92nd)	—	no fix	2021-08-23	≤ < 1.4.18
CVE-2021-39149US	high8.5	4.74% (92nd)	—	no fix	2021-08-23	≤ < 1.4.18
CVE-2021-39148US	high8.5	4.74% (92nd)	—	no fix	2021-08-23	≤ < 1.4.18
CVE-2021-39147US	high8.5	4.74% (92nd)	—	no fix	2021-08-23	≤ < 1.4.18
CVE-2021-39139US	high8.8	4.54% (92nd)	—	no fix	2021-08-23	≤ < 1.4.18
CVE-2021-39153US	high8.5	4.46% (91st)	—	no fix	2021-08-23	≤ < 1.4.18
CVE-2021-39145US	high8.5	4.06% (91st)	—	no fix	2021-08-23	≤ < 1.4.18
CVE-2021-39150US	high8.5	3.44% (89th)	—	no fix	2021-08-23	≤ < 1.4.18
CVE-2024-47072US	—	2.00% (81st)	—	no fix	2024-11-08	≤ < 1.4.21

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-502Deserialization of Untrusted Data29 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type15 CVEs
CWE-918Server-Side Request Forgery (SSRF)5 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs
CWE-121Stack-based Buffer Overflow2 CVEs
CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')2 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)32 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan