Known vulnerabilities in SoapUI

Vendor: SmartBear
Software: SoapUI
Software CPE: cpe:2.3:a:smartbear:soapui:*:*:*:*:*:*:*:*
Total vulnerabilities: 5
Public exploits: 3
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SoapUI SoapUI is affected by 5 known vulnerabilities: 1 critical, 4 high Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU95628 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-7565
CWE-22 High
No
No
5.7.1, 5.7.2 09.08.2024 SB2024080945
#VU58976 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-45046
CWE-94 High
Available
Exploited
5.6.1 15.12.2021 SB2021121504
SB2021121511
SB2021121512
and 178 more
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228
CWE-94 Critical
Available
Exploited
5.6.1 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more
#VU37510 - Improper Control of Generation of Code ('Code Injection')
CVE-2017-16670
CWE-94 High
No
No
- 19.02.2018 SB2018021926
#VU42108 - Improper Control of Generation of Code ('Code Injection')
CVE-2014-1202
CWE-94 High
Available
No
- 25.01.2014 SB2014012501