Xstream vulnerabilities
We track 2 vulnerabilities in Xstream products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 16, 2022.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Xstream vulnerabilities
- 7.5 High severity
Woodstox: Out-of-bounds Write
Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks (DOS) if DTD support is enabled. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect
- 7.5 High severity
xstream: Out-of-bounds Write
Those using Xstream to seralize XML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of