Smartbear Soapui — known CVE vulnerabilities

Every CVE whose affected-product data names Smartbear Soapui, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2014-1202 — CVSS 9.3 (critical): The WSDL/WADL import functionality in SoapUI before 4.6.4 allows remote attackers to execute arbitrary Java code via a crafted request…
• CVE-2017-16670 — CVSS 7.8 (high): The project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in…
• CVE-2019-12180 — CVSS 7.8 (high): An issue was discovered in SmartBear ReadyAPI through 2.8.2 and 3.0.0 and SoapUI through 5.5. When opening a project, the Groovy "Load…
• CVE-2024-7565 — CVSS 7.8 (high): SMARTBEAR SoapUI unpackageAll Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to…