CVE:CVE-2019-10173
CNNVD:CNNVD-201907-1192
XStream是XStream（Xstream）团队的一个轻量级的、简单易用的开源Java类库，它主要用于将对象序列化成XML（JSON）或反序列化为对象。
xstream 1.4.10版本中存在代码注入漏洞。该漏洞源于网络系统或产品的代码开发过程中存在设计或实现不当的问题。
solution:Upgrade xstream_project xstream to a higher version than 1.4.10,and avoid the version 1.4.10; Upgrade oracle banking_platform to a higher version than 2.10.0,2.4.0,2.7.1,2.9.0,and avoid the version [2.4.0,2.10.0],2.4.0,2.7.1,2.9.0; Upgrade oracle business_activity_monitoring to a higher version than 11.1.1.9.0,12.2.1.3.0,12.2.1.4.0,and avoid the version 11.1.1.9.0,12.2.1.3.0,12.2.1.4.0; Upgrade oracle communications_billing_and_revenue_management_elastic_charging_engine to a higher version than 11.3.0.9.0,12.0.0.3.0,and avoid the version 11.3.0.9.0,12.0.0.3.0; Upgrade oracle communications_diameter_signaling_router to a higher version than 8.2.2,and avoid the version [8.0.0,8.2.2]; Upgrade oracle communications_unified_inventory_management to a higher version than 7.3.0,7.4.0,and avoid the version 7.3.0,7.4.0; Upgrade oracle endeca_information_discovery_studio to a higher version than 3.2.0,3.2.0.0,and avoid the version 3.2.0,3.2.0.0; Upgrade oracle retail_xstore_point_of_service to a higher version than 17.0,and avoid the version 17.0; Upgrade oracle utilities_framework to a higher version than 4.3.0.6.0,2.2.0.0.0,4.2.0.2.0,4.2.0.3.0,4.4.0.0.0,and avoid the version [4.3.0.1.0,4.3.0.6.0],2.2.0.0.0,4.2.0.2.0,4.2.0.3.0,4.4.0.0.0; Upgrade oracle webcenter_portal to a higher version than 11.1.1.9.0,12.2.1.3.0,12.2.1.4.0,and avoid the version 11.1.1.9.0,12.2.1.3.0,12.2.1.4.0