CVE:CVE-2021-39144
CNNVD:CNNVD-202108-1890
XStream是XStream（Xstream）团队的一个轻量级的、简单易用的开源Java类库，它主要用于将对象序列化成XML（JSON）或反序列化为对象。
XStream 1.4.17及之前版本存在代码问题漏洞，远程攻击者可以通过操纵处理后的输入流，从远程主机加载和执行任意代码。
solution:Upgrade xstream_project xstream to a higher version than 1.4.18,and avoid the version (,1.4.18); Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade fedoraproject fedora to a higher version than 33,34,35,and avoid the version 33,34,35; Upgrade netapp snapmanager to a higher version than -; Upgrade oracle business_activity_monitoring to a higher version than 12.2.1.4.0,and avoid the version 12.2.1.4.0; Upgrade oracle commerce_guided_search to a higher version than 11.3.2,and avoid the version 11.3.2; Upgrade oracle communications_billing_and_revenue_management_elastic_charging_engine to a higher version than 11.3,12.0,and avoid the version 11.3,12.0; Upgrade oracle communications_cloud_native_core_automated_test_suite to a higher version than 1.9.0,and avoid the version 1.9.0; Upgrade oracle communications_cloud_native_core_binding_support_function to a higher version than 1.10.0,and avoid the version 1.10.0; Upgrade oracle communications_cloud_native_core_policy to a higher version than 1.14.0,and avoid the version 1.14.0; Upgrade oracle communications_unified_inventory_management to a higher version than 7.3.4,7.3.5,7.4.0,7.4.1,7.4.2,and avoid the version 7.3.4,7.3.5,7.4.0,7.4.1,7.4.2; Upgrade oracle retail_xstore_point_of_service to a higher version than 16.0.6,17.0.4,18.0.3,19.0.2,20.0.1,and avoid the version 16.0.6,17.0.4,18.0.3,19.0.2,20.0.1; Upgrade oracle utilities_framework to a higher version than 4.2.0.2.0,4.2.0.3.0,4.3.0.1.0,4.3.0.6.0,4.4.0.0.0,4.4.0.2.0,4.4.0.3.0,and avoid the version 4.2.0.2.0,4.2.0.3.0,4.3.0.1.0,4.3.0.6.0,4.4.0.0.0,4.4.0.2.0,4.4.0.3.0; Upgrade oracle utilities_testing_accelerator to a higher version than 6.0.0.1.1,and avoid the version 6.0.0.1.1; Upgrade oracle webcenter_portal to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0