VDB

BDU%3A2021-05486

BDU%3A2021-05486 PUBLISHED CVSS 7.800000190734863 HIGH

Уязвимость Java-библиотеки Xstream для преобразования объектов в форматы XML или JSON, связанная с недостаточной проверкой поступающих запросов, позволяющая нарушителю раскрыть защищаемую информацию

Risk Scores

CVSS 2.0
7.800000190734863

Affected Products

VendorProductVersions
Red Hat Inc., Сообщество свободного программного обеспечения, Canonical Ltd., Oracle Corp., Novell Inc., Fedora Project, Xstream Project, Apache Software Foundation, McAfee Inc.Red Hat Enterprise Linux, Debian GNU/Linux, Ubuntu, Oracle Communications Unified Inventory Management, Red Hat JBoss Fuse, Red Hat Descision Manager, openSUSE Tumbleweed, Red Hat JBoss Data Virtualization, Red Hat BPM Suite, Red Hat JBoss Data Grid, OpenSUSE Leap, Red Hat Process Automation, Fedora, Oracle Business Activity Monitoring, Oracle Banking Platform, Red Hat Integration Camel K, Red Hat Integration Camel Quarkus, XStream, Log4j, Oracle Communications BRM, Oracle Banking Enterprise Default Management, Oracle Retail Xstore Point of Service, Oracle Communications Policy Management, Oracle Banking Virtual Account Management, Red Hat Data Grid, Red Hat CodeReady Studio, Red Hat JBoss A-MQ, Red Hat JBoss BRMS, Red Hat JBoss Fuse Service Works, Red Hat JBoss SOA Platform, Oracle WebCenter Portal, McAfee Web Gateway

Timeline

  • Nov 17, 2021 CVE Published
  • Mar 19, 2026 Distribution Patch
  • Mar 19, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›