Vulnerabilities (CVE)

Filtered by vendor Smartbear Subscribe
Total 23 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-5682 1 Smartbear 1 Swagger-ui 2026-06-17 4.3 MEDIUM 6.1 MEDIUM
Swagger-UI before 2.2.1 has XSS via the Default field in the Definitions section.
CVE-2016-1000229 2 Redhat, Smartbear 3 Jboss Fuse, Openshift, Swagger-ui 2026-06-17 4.3 MEDIUM 6.1 MEDIUM
swagger-ui has XSS in key names
CVE-2014-1202 2 Eviware, Smartbear 2 Soapui, Soapui 2026-06-17 9.3 HIGH N/A
The WSDL/WADL import functionality in SoapUI before 4.6.4 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file.