CVE:CVE-2021-39151
CNNVD:CNNVD-202108-1896
XStream是XStream（Xstream）团队的一个轻量级的、简单易用的开源Java类库，它主要用于将对象序列化成XML（JSON）或反序列化为对象。
XStream 1.4.18之前版本存在代码问题漏洞，攻击者可利用该漏洞通过操纵已处理的输入流从远程主机加载和执行任意代码
solution:Upgrade xstream_project xstream to a higher version than 1.4.18,and avoid the version (,1.4.18); Upgrade fedoraproject fedora to a higher version than 33,34,35,and avoid the version 33,34,35; Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade netapp snapmanager to a higher version than -; Upgrade oracle business_activity_monitoring to a higher version than 12.2.1.4.0,and avoid the version 12.2.1.4.0; Upgrade oracle commerce_guided_search to a higher version than 11.3.2,and avoid the version 11.3.2; Upgrade oracle communications_billing_and_revenue_management_elastic_charging_engine to a higher version than 11.3,12.0,and avoid the version 11.3,12.0; Upgrade oracle communications_cloud_native_core_automated_test_suite to a higher version than 1.9.0,and avoid the version 1.9.0; Upgrade oracle communications_cloud_native_core_binding_support_function to a higher version than 1.10.0,and avoid the version 1.10.0; Upgrade oracle communications_cloud_native_core_policy to a higher version than 1.14.0,and avoid the version 1.14.0; Upgrade oracle communications_unified_inventory_management to a higher version than 7.3.4,7.3.5,7.4.0,7.4.1,7.4.2,and avoid the version 7.3.4,7.3.5,7.4.0,7.4.1,7.4.2; Upgrade oracle retail_xstore_point_of_service to a higher version than 16.0.6,17.0.2,18.0.3,19.0.2,20.0.1,and avoid the version 16.0.6,17.0.2,18.0.3,19.0.2,20.0.1; Upgrade oracle utilities_framework to a higher version than 4.2.0.2.0,4.2.0.3.0,4.3.0.1.0,4.3.0.6.0,4.4.0.0.0,4.4.0.2.0,4.4.0.3.0,and avoid the version 4.2.0.2.0,4.2.0.3.0,4.3.0.1.0,4.3.0.6.0,4.4.0.0.0,4.4.0.2.0,4.4.0.3.0; Upgrade oracle utilities_testing_accelerator to a higher version than 6.0.0.1.1,and avoid the version 6.0.0.1.1; Upgrade oracle webcenter_portal to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0