Sploitus

36 exploited vulnerabilities in Xstream

Vulnerabilities with publicly known exploits

Vendors
Alt Linux, Astra Linux, Centos, Linux Mint, Red Hat, Suse
With known exploits
36
Affected Netapp Oncommand Insight versions
All versions
Affected Xstream versions
< 1.4.14, 1.4.17, 1.4.18, 1.4.20
Affected Apache Struts versions
< 6.0.0, 2.3.34, 2.5.13
Affected Jenkins versions
< 2.319.3, 2.334
Affected Redhat Jboss Middleware versions
= 1

Vulnerabilities with exploits

Highest CVSS first — 9 of these already have exploit code on Sploitus

CVE-2021-21350
CVSS 10.0 CRITICAL 2021-03-12FIX AVAILABLE
CVE-2021-21346
CVSS 10.0 CRITICAL 2021-03-12FIX AVAILABLE
CVE-2021-21347
CVSS 10.0 CRITICAL 2021-03-12FIX AVAILABLE
CVE-2021-21344
CVSS 10.0 CRITICAL 2021-03-12FIX AVAILABLE
CVE-2021-21345
CVSS 9.9 CRITICAL 2021-03-12FIX AVAILABLE
CVE-2018-19530
CVSS 9.8 CRITICAL 2018-11-26FIX AVAILABLE
CVE-2021-21342
CVSS 9.4 CRITICAL 2021-03-12FIX AVAILABLE
CVE-2020-26217 6 exploits
CVSS 9.3 HIGH 2020-11-16FIX AVAILABLE
Exploit for OS Command Injection in XstreamExploit for OS Command Injection in Apache Struts
CVE-2021-21351
CVSS 9.1 CRITICAL 2021-03-12FIX AVAILABLE
CVE-2021-29505 1 exploit
CVSS 9.0 HIGH 2021-05-14FIX AVAILABLE
XStream远程代码执行漏洞（CVE-2021-29505）
CVE-2021-21349
CVSS 8.6 HIGH 2021-03-12FIX AVAILABLE
CVE-2021-39154
CVSS 8.5 HIGH 2021-08-23FIX AVAILABLE
CVE-2021-39152 1 exploit
CVSS 8.5 HIGH 2021-08-23FIX AVAILABLE
Exploit for Deserialization of Untrusted Data in Xstream
CVE-2021-39151
CVSS 8.5 HIGH 2021-08-23FIX AVAILABLE
CVE-2021-39150 1 exploit
CVSS 8.5 HIGH 2021-08-23FIX AVAILABLE
Exploit for Deserialization of Untrusted Data in Xstream
CVE-2021-39149
CVSS 8.5 HIGH 2021-08-23FIX AVAILABLE
CVE-2021-39148
CVSS 8.5 HIGH 2021-08-23FIX AVAILABLE
CVE-2021-39147
CVSS 8.5 HIGH 2021-08-23FIX AVAILABLE
CVE-2021-39146
CVSS 8.5 HIGH 2021-08-23FIX AVAILABLE
CVE-2021-39145
CVSS 8.5 HIGH 2021-08-23FIX AVAILABLE
CVE-2021-39141 1 exploit
CVSS 8.5 HIGH 2021-08-23FIX AVAILABLE
Exploit for Deserialization of Untrusted Data in Xstream
CVE-2021-39144 5 exploits
CVSS 8.5 HIGH 2021-08-23FIX AVAILABLE
VMware NSX Manager XStream Unauthenticated Remote Code Execution ExploitVMware NSX Manager XStream unauthenticated RCE
CVE-2020-26259 4 exploits
CVSS 8.5 HIGH 2020-12-15FIX AVAILABLE
Exploit for OS Command Injection in Apache StrutsExploit for OS Command Injection in Apache Struts
CVE-2022-41966
CVSS 8.2 HIGH 2022-12-21FIX AVAILABLE
CVE-2016-2510
CVSS 8.1 HIGH 2016-02-19FIX AVAILABLE
CVE-2021-43859
CVSS 7.8 HIGH 2022-02-01FIX AVAILABLE
CVE-2020-26258 3 exploits
CVSS 7.8 HIGH 2020-12-15FIX AVAILABLE
Exploit for OS Command Injection in Apache StrutsExploit for Server-Side Request Forgery in Apache Struts
CVE-2017-9805 27 exploits
CVSS 7.6 HIGH 2017-09-05FIX AVAILABLE
Exploit for Deserialization of Untrusted Data in Apache StrutsExploit for Deserialization of Untrusted Data in Apache Struts
CVE-2022-40156
CVSS 7.5 HIGH 2022-09-16
CVE-2022-40154
CVSS 7.5 HIGH 2022-09-16
CVE-2022-40153
CVSS 7.5 HIGH 2022-09-16
CVE-2022-40151
CVSS 7.5 HIGH 2022-09-16
CVE-2021-21343
CVSS 7.5 HIGH 2021-03-22FIX AVAILABLE
CVE-2021-21341
CVSS 7.5 HIGH 2021-03-16FIX AVAILABLE
CVE-2016-3674
CVSS 7.5 HIGH 2016-05-05FIX AVAILABLE
CVE-2021-39140
CVSS 6.5 MEDIUM 2021-08-23