ACTIEF MISBRUIKT

CVE-2021-39144: XStream Remote Code Execution Vulnerability

Gegevens
Leverancier	XStream
Product	XStream
Actief misbruikt	Ja
Toegevoegd aan CISA KEV	10 mrt 2023
CISA-deadline (Amerikaanse overheid)	31 mrt 2023
Zwakte (CWE)	CWE-502, CWE-94

Vereiste actie (tekst van CISA, Engels)

Apply updates per vendor instructions.

Beschrijving (NVD, Engels)

XStream contains a remote code execution vulnerability that allows an attacker to manipulate the processed input stream and replace or inject objects that result in the execution of a local command on the server. This vulnerability can affect multiple products, including but not limited to VMware Cloud Foundation.

BRONNEN

CISA KEVCISA Known Exploited Vulnerabilities catalog

Gegevens van NVD, CISA KEV, FIRST EPSS en adviezen van leveranciers. Bijgewerkt 10 nov 2026.