diff --git a/pom.xml b/pom.xml
index 58f8d2ada0..40822cb4c8 100644
--- a/pom.xml
+++ b/pom.xml
@@ -71,7 +71,7 @@
         <spring.security.version>4.0.1.RELEASE</spring.security.version>
         <spring-webflow.version>2.3.0.RELEASE</spring-webflow.version>
         <struts.version>1.2.9</struts.version>
-        <xstream.version>1.4.1</xstream.version>
+        <xstream.version>1.4.19</xstream.version>
         <!-- JDBC Drivers -->
         <db.vendor>mysql</db.vendor>
         <mysql.groupId>mysql</mysql.groupId>