eviware vulnerabilities

Products

• soapui 1

Latest eviware CVEs

Newest publication first

1. CVE-2014-1202 Code injection via property expansion in SoapUI

   Published 2014-01-25

   High·CVSS 9.3 Public exploit

   The WSDL/WADL import functionality in SoapUI before 4.6.4 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.