RHSA-2021%3A0105 | Vulnetix

RHSA-2021%3A0105 PUBLISHED CVSS 9 CRITICAL

Record from redhat · Published January 13, 2021

A flaw was found in xstream. An unsafe deserialization of user-supplied XML, in conjunction with relying on the default deny list, allows a remote attacker to perform a variety of attacks including a remote code execution of arbitrary code in the context of the JVM running the XStream application. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Risk scores

CVSS 3.1

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected products

Vendor	Product	Versions
Red Hat	RHPAM 7.9.1

Timeline

Jan 13, 2021 CVE Published
May 1, 2026 Distribution Patch (2 in total, the first dated here)
May 1, 2026 Security Advisory (2 in total, the first dated here)
May 14, 2026 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln RHSA-2021%3A0105
vulnetix vdb fixes RHSA-2021%3A0105

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/RHSA-2021%253A0105/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →