Smartbear: Security Vulnerabilities
The project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL project file.
CVSS Score
7.8
EPSS Score
0.004
Published
2018-02-19
Swagger-UI before 2.2.1 has XSS via the Default field in the Definitions section.
CVSS Score
6.1
EPSS Score
0.003
Published
2017-04-10
The WSDL/WADL import functionality in SoapUI before 4.6.4 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file.
CVSS Score
9.3
EPSS Score
0.173
Published
2014-01-25
Page 3