● CVE — High
CVE-2021-29505
Vendordebian, fedoraproject, xstream, oracle, netappProductdebian linux, fedora, xstream, communications unified inventory management, snapmanager, webcenter sites, webcenter portal, enterprise manager ops center, retail xstore point of service, retail customer insights, communications brm - elastic charging engine, banking corporate lending process management, banking credit facilities process management, banking supply chain finance, banking trade finance process management, business activity monitoring, banking cash managementDiscoveredMay 28, 2021UpdatedOct 7, 2026
XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types is affected. The vulnerability is patched in version 1.4.17.