xstream xstream

Name: xstream xstream
Brand: xstream

productUS

cpe:2.3:a:xstream:xstream:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

9critical26high2medium0low

updated 2026-10-28

vulnerabilities (37)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-39144US	high8.5OT critical	98.1% (100th)	KEV	1.4.18	2021-08-23	< 1.4.18
CVE-2013-7285US	critical9.8	84.4% (100th)	Exploit	no fix	2019-05-15	2 versions
CVE-2020-26217US	high8.8	82.7% (100th)	Exploit	1.4.14	2020-11-16	< 1.4.14
CVE-2020-26259US	medium6.8	82.4% (100th)	Exploit	1.4.15	2020-12-16	< 1.4.15
CVE-2020-26258US	high7.7	81.8% (100th)	Exploit	1.4.15	2020-12-16	< 1.4.15
CVE-2021-21341US	high7.5	77.8% (100th)	Exploit	1.4.16	2021-03-23	< 1.4.16
CVE-2021-29505US	high8.8	77.2% (100th)	Exploit	1.4.17	2021-05-28	< 1.4.17
CVE-2021-21345US	critical9.9	72.3% (99th)	Exploit	1.4.16	2021-03-23	< 1.4.16
CVE-2021-21349US	high8.6	46.8% (99th)	Exploit	1.4.16	2021-03-23	< 1.4.16
CVE-2021-39141US	high8.5	16.1% (97th)	Exploit	1.4.18	2021-08-23	< 1.4.18
CVE-2022-41966US	high7.5	9.35% (95th)	Exploit	1.4.20	2022-12-28	< 1.4.20
CVE-2019-10173US	critical9.8	95.0% (100th)	—	no fix	2019-07-23	= 1.4.10
CVE-2021-21351US	critical9.1	82.1% (100th)	—	1.4.16	2021-03-23	< 1.4.16
CVE-2021-21346US	critical9.8	76.4% (100th)	—	1.4.16	2021-03-23	< 1.4.16
CVE-2021-21344US	critical9.8	76.0% (100th)	—	1.4.16	2021-03-23	< 1.4.16
CVE-2021-21342US	critical9.1	50.0% (99th)	—	1.4.16	2021-03-23	< 1.4.16
CVE-2021-21343US	high7.5	46.7% (99th)	—	1.4.16	2021-03-23	< 1.4.16
CVE-2022-40152US	high7.5	18.2% (97th)	—	1.4.20	2022-09-16	< 1.4.20
CVE-2021-21350US	critical9.8	15.2% (97th)	—	1.4.16	2021-03-23	< 1.4.16
CVE-2021-21347US	critical9.8	14.3% (97th)	—	1.4.16	2021-03-23	< 1.4.16
CVE-2021-39146US	high8.5	14.3% (97th)	—	1.4.18	2021-08-23	< 1.4.18
CVE-2021-21348US	high7.5	13.8% (97th)	—	1.4.16	2021-03-23	< 1.4.16
CVE-2021-39152US	high8.5	11.4% (96th)	—	1.4.18	2021-08-23	< 1.4.18
CVE-2016-3674US	high7.5	8.18% (95th)	—	1.4.9	2016-05-17	< 1.4.9
CVE-2021-43859US	high7.5	7.93% (95th)	—	1.4.19	2022-02-01	< 1.4.19
CVE-2021-39140US	medium6.3	5.92% (93rd)	—	1.4.18	2021-08-23	< 1.4.18
CVE-2017-7957US	high7.5	4.93% (92nd)	—	no fix	2017-04-29	≤ 1.4.9
CVE-2021-39154US	high8.5	4.74% (92nd)	—	1.4.18	2021-08-23	< 1.4.18
CVE-2021-39151US	high8.5	4.74% (92nd)	—	1.4.18	2021-08-23	< 1.4.18
CVE-2021-39149US	high8.5	4.74% (92nd)	—	1.4.18	2021-08-23	< 1.4.18
CVE-2021-39148US	high8.5	4.74% (92nd)	—	1.4.18	2021-08-23	< 1.4.18
CVE-2021-39147US	high8.5	4.74% (92nd)	—	1.4.18	2021-08-23	< 1.4.18
CVE-2021-39139US	high8.8	4.54% (92nd)	—	1.4.18	2021-08-23	< 1.4.18
CVE-2021-39153US	high8.5	4.46% (91st)	—	1.4.18	2021-08-23	< 1.4.18
CVE-2021-39145US	high8.5	4.06% (91st)	—	1.4.18	2021-08-23	< 1.4.18
CVE-2021-39150US	high8.5	3.44% (89th)	—	1.4.18	2021-08-23	< 1.4.18
CVE-2022-40151US	high7.5	2.22% (83rd)	—	1.4.20	2022-09-16	< 1.4.20

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-502Deserialization of Untrusted Data30 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type15 CVEs
CWE-918Server-Side Request Forgery (SSRF)5 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')4 CVEs
CWE-121Stack-based Buffer Overflow3 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-787Out-of-bounds Write2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE37 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan