Soapui

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-7565 Nov 22, 22:15 HIGH This Week

SMARTBEAR SoapUI unpackageAll Directory Traversal Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Path Traversal Soapui Smartbear

NVD

CVSS 3.1

7.8

EPSS

1.0%

CVE-2014-1202 Jan 25, 01:55 Maven CRITICAL POC PATCH THREAT Act Now

The WSDL/WADL import functionality in SoapUI before 4.6.4 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable. Public exploit code available and EPSS exploitation probability 17.3%.

RCE Java Code Injection Soapui Smartbear

NVD Exploit-DB GitHub

CVSS 2.0

9.3

EPSS

17.3%

CVE-2024-7565

EPSS 1% CVSS 7.8

HIGH This Week

RCE Path Traversal Soapui +1

NVD

CVE-2014-1202 Maven

EPSS 17% CVSS 9.3

CRITICAL POC PATCH THREAT Act Now

RCE Java Code Injection +2

NVD Exploit-DB GitHub