← Back

Smartbear

smartbear

23 CVEs • 8 products

Products (8)

Click to collapse
Toggle
Swagger Ui
swagger-ui
Soapui
soapui
Readyapi
readyapi
Collaborator
collaborator

CVEs (23)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Smartbear
1Soapui
Nov 21, 2024
Feb 19, 2018
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
The project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL project file.
1Smartbear
1Swagger Ui
May 13, 2026
Apr 10, 2017
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Swagger-UI before 2.2.1 has XSS via the Default field in the Definitions section.
2Eviware
Smartbear
2Soapui
Soapui
Apr 29, 2026
Jan 25, 2014
N/A· v4
N/A· v3
9.3 HIGH· v2
The WSDL/WADL import functionality in SoapUI before 4.6.4 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file.