VDB

BDU%3A2021-05946

BDU%3A2021-05946 PUBLISHED CVSS 9 CRITICAL

Уязвимость Java-библиотеки Xstream для преобразования объектов в форматы XML или JSON, связанная с неверным управлением генерацией кода, позволяющая нарушителю выполнять команды на хосте

Risk Scores

CVSS 2.0
9

Affected Products

VendorProductVersions
Red Hat Inc., Сообщество свободного программного обеспечения, Canonical Ltd., Oracle Corp., Novell Inc., Fedora Project, Xstream Project, Apache Software Foundation, McAfee Inc.Red Hat Enterprise Linux, Debian GNU/Linux, Ubuntu, Oracle Communications Unified Inventory Management, Red Hat JBoss Fuse, Red Hat Descision Manager, openSUSE Tumbleweed, Oracle Endeca Information Discovery Studio, Red Hat JBoss Data Virtualization, Red Hat BPM Suite, Red Hat JBoss Data Grid, OpenSUSE Leap, Red Hat Process Automation, Fedora, Oracle Banking Credit Facilities Process Management, Oracle Banking Corporate Lending Process Management, Oracle Business Activity Monitoring, Oracle Banking Platform, Red Hat Integration Camel K, Red Hat Integration Camel Quarkus, XStream, Log4j, Oracle Communications BRM, Oracle Banking Enterprise Default Management, Oracle Retail Xstore Point of Service, Oracle Communications Policy Management, Oracle Banking Virtual Account Management, Red Hat Data Grid, Red Hat CodeReady Studio, Red Hat JBoss A-MQ, Red Hat JBoss BRMS, Red Hat JBoss Fuse Service Works, Red Hat JBoss SOA Platform, Oracle WebCenter Portal, Oracle Banking Cash Management, Oracle Banking Supply Chain Finance, McAfee Web Gateway

Timeline

  • Dec 9, 2021 CVE Published
  • Mar 19, 2026 Distribution Patch
  • Mar 19, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›