CVE:CVE-2021-29505
CNNVD:CNNVD-202105-1981
XStream是XStream（Xstream）团队的一个轻量级的、简单易用的开源Java类库，它主要用于将对象序列化成XML（JSON）或反序列化为对象。
XStream存在代码问题漏洞，该漏洞允许远程攻击者有足够的权限仅通过操纵处理后的输入流来执行主机的命令。
solution:Upgrade xstream_project xstream to a higher version than 1.4.17,and avoid the version (,1.4.17); Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade fedoraproject fedora to a higher version than 33,34,35,and avoid the version 33,34,35; Upgrade netapp snapmanager to a higher version than -; Upgrade oracle banking_cash_management to a higher version than 14.2,14.3,14.5,and avoid the version 14.2,14.3,14.5; Upgrade oracle banking_corporate_lending_process_management to a higher version than 14.2.0,14.3.0,14.5.0,and avoid the version 14.2.0,14.3.0,14.5.0; Upgrade oracle banking_credit_facilities_process_management to a higher version than 14.2.0,14.3.0,14.5.0,and avoid the version 14.2.0,14.3.0,14.5.0; Upgrade oracle banking_supply_chain_finance to a higher version than 14.2.0,and avoid the version 14.2.0; Upgrade oracle banking_trade_finance_process_management to a higher version than 14.5.0,and avoid the version 14.5.0; Upgrade oracle business_activity_monitoring to a higher version than 11.1.1.9.0,12.2.1.3.0,12.2.1.4.0,and avoid the version 11.1.1.9.0,12.2.1.3.0,12.2.1.4.0; Upgrade oracle communications_brm_-_elastic_charging_engine to a higher version than 11.3,12.0,and avoid the version 11.3,12.0; Upgrade oracle communications_unified_inventory_management to a higher version than 7.3.4,7.3.5,7.4.0,7.4.1,7.4.2,and avoid the version 7.3.4,7.3.5,7.4.0,7.4.1,7.4.2; Upgrade oracle enterprise_manager_ops_center to a higher version than 12.4.0.0,and avoid the version 12.4.0.0; Upgrade oracle retail_xstore_point_of_service to a higher version than 16.0.6,17.0.4,18.0.3,19.0.2,20.0.1,and avoid the version 16.0.6,17.0.4,18.0.3,19.0.2,20.0.1; Upgrade oracle webcenter_portal to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle webcenter_sites to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0