Multiple XML external entity (XXE) vulnerabilities in the (1) Dom4JDriver, (2) DomDriver, (3) JDomDriver, (4) JDom2Driver, (5) SjsxpDriver, (6) StandardStaxDriver, and (7) WstxDriver drivers in XStream before 1.4.9 allow remote attackers to read arbitrary files via a crafted XML document.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libxstream-java | May 13, 2016 | May 12, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 15, 2016 |
| Suse | — | Upgrade xstream | Aug 9, 2024 | May 17, 2016 |
| Ubuntu | — | Upgrade libxstream-java (Ubuntu Pro) | Aug 23, 2024 | May 17, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub