CVE-2021-29505 Scanner
CVE-2021-29505 scanner - Remote Code Execution vulnerability in XStream
Used 2.5k times · 5.9k assets checked · domain, ipv4, subdomain
CVE
CVE-2021-29505
8.8
CVSShigh
Exploitable remotely over the internet · low-privilege account sufficient.
Description
XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types is affected. The vulnerability is patched in version 1.4.17.
Attack Vector
Network
Privileges Req.
Low
User Interaction
None
xstream
Updated Sep 18, 2026View on NVD →
S4E scanner
CVE history: xstream
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →