[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMHIn_v3hXEllQReHEKP7vdICFPorF-LiVl3nSRAebcg":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":72,"kevVulnerabilities":133,"topProductsByCves":134,"seoMetadata":145,"meta":154},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":71},29453,"smartbear",11,22,0,1162,"2025-09-25","s",[16,22,27,33,38,44,49,53,58,63,68],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},154595,"zephyr_enterprise",38,4,"2023-03-08",{"id":23,"product_name":24,"version_count":25,"cve_count":20,"kev_count":11,"last_cve_update":26},154588,"soapui",43,"2024-11-22",{"id":28,"product_name":29,"version_count":30,"cve_count":31,"kev_count":11,"last_cve_update":32},154593,"swagger_ui",158,3,"2024-01-15",{"id":34,"product_name":35,"version_count":36,"cve_count":31,"kev_count":11,"last_cve_update":37},154587,"readyapi",30,"2020-05-20",{"id":39,"product_name":40,"version_count":41,"cve_count":42,"kev_count":11,"last_cve_update":43},154589,"swagger-codegen",62,2,"2021-03-11",{"id":45,"product_name":46,"version_count":47,"cve_count":42,"kev_count":11,"last_cve_update":48},154586,"collaborator",340,"2022-03-10",{"id":50,"product_name":51,"version_count":52,"cve_count":42,"kev_count":11,"last_cve_update":13},154591,"swagger_petstore",1,{"id":54,"product_name":55,"version_count":56,"cve_count":42,"kev_count":11,"last_cve_update":57},154592,"swagger-ui",171,"2019-12-20",{"id":59,"product_name":60,"version_count":61,"cve_count":52,"kev_count":11,"last_cve_update":62},154594,"swagger-ui-dist",278,"2022-03-11",{"id":64,"product_name":65,"version_count":66,"cve_count":11,"kev_count":11,"last_cve_update":67},154590,"swagger_codegen",40,null,{"id":69,"product_name":70,"version_count":52,"cve_count":11,"kev_count":11,"last_cve_update":67},154585,"aqtime","Smartbear is a technology vendor with 11 tracked products and 22 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[73,81,87,95,102,107,113,118,123,128],{"cveId":74,"description":75,"publishedDate":62,"cvssScore":76,"cvssVersion":77,"severity":78,"isKev":79,"epssScore":80},"CVE-2018-25031","Swagger UI 4.1.2 and earlier could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an attacker could exploit this vulnerability to display remote OpenAPI definitions. Note: This was originally claimed to be resolved in 4.1.3. However, third parties have indicated this is not resolved in 4.1.3 and even occurs in that version and possibly others.",4.3,"v3.1","Medium",false,0.42326,{"cveId":82,"description":83,"publishedDate":37,"cvssScore":84,"cvssVersion":77,"severity":85,"isKev":79,"epssScore":86},"CVE-2020-12835","An issue was discovered in SmartBear ReadyAPI SoapUI Pro 3.2.5. Due to unsafe use of an Java RMI based protocol in an unsafe configuration, an attacker can inject malicious serialized objects into the communication, resulting in remote code execution in the context of a client-side Network Licensing Protocol component.",9.8,"Critical",0.13286,{"cveId":88,"description":89,"publishedDate":90,"cvssScore":91,"cvssVersion":92,"severity":93,"isKev":79,"epssScore":94},"CVE-2018-20580","The WSDL import functionality in SmartBear ReadyAPI 2.5.0 and 2.6.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file.","2019-05-03",8.8,"v3.0","High",0.09786,{"cveId":96,"description":97,"publishedDate":98,"cvssScore":99,"cvssVersion":100,"severity":85,"isKev":79,"epssScore":101},"CVE-2014-1202","The WSDL\u002FWADL import functionality in SoapUI before 4.6.4 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file.","2014-01-25",9.3,"v2",0.07673,{"cveId":103,"description":104,"publishedDate":105,"cvssScore":84,"cvssVersion":77,"severity":85,"isKev":79,"epssScore":106},"CVE-2019-17495","A Cascading Style Sheets (CSS) injection vulnerability in Swagger UI before 3.23.11 allows attackers to use the Relative Path Overwrite (RPO) technique to perform CSS-based input field value exfiltration, such as exfiltration of a CSRF token value. In other words, this product intentionally allows the embedding of untrusted JSON data from remote servers, but it was not previously known that \u003Cstyle>@import within the JSON data was a functional attack method.","2019-10-10",0.05734,{"cveId":108,"description":109,"publishedDate":110,"cvssScore":111,"cvssVersion":77,"severity":93,"isKev":79,"epssScore":112},"CVE-2019-12180","An issue was discovered in SmartBear ReadyAPI through 2.8.2 and 3.0.0 and SoapUI through 5.5. When opening a project, the Groovy \"Load Script\" is automatically executed. This allows an attacker to execute arbitrary Groovy Language code (Java scripting language) on the victim machine by inducing it to open a malicious Project. The same issue is present in the \"Save Script\" function, which is executed automatically when saving a project.","2020-02-05",7.8,0.04757,{"cveId":114,"description":115,"publishedDate":57,"cvssScore":116,"cvssVersion":77,"severity":78,"isKev":79,"epssScore":117},"CVE-2016-1000229","swagger-ui has XSS in key names",6.1,0.04036,{"cveId":119,"description":120,"publishedDate":121,"cvssScore":91,"cvssVersion":77,"severity":93,"isKev":79,"epssScore":122},"CVE-2020-26118","In SmartBear Collaborator Server through 13.3.13302, use of the Google Web Toolkit (GWT) API introduces a post-authentication Java deserialization vulnerability. The application's UpdateMemento class accepts a serialized Java object directly from the user without properly sanitizing it. A malicious object can be submitted to the server via an authenticated attacker to execute commands on the underlying system.","2021-01-11",0.03807,{"cveId":124,"description":125,"publishedDate":32,"cvssScore":126,"cvssVersion":77,"severity":78,"isKev":79,"epssScore":127},"CVE-2024-22207","fastify-swagger-ui is a Fastify plugin for serving Swagger UI.  Prior to 2.1.0, the default configuration of `@fastify\u002Fswagger-ui` without `baseDir` set will lead to all files in the module's directory being exposed via http routes served by the module.  The vulnerability is fixed in v2.1.0. Setting the `baseDir` option can also work around this vulnerability.",5.3,0.0229,{"cveId":129,"description":130,"publishedDate":131,"cvssScore":111,"cvssVersion":92,"severity":93,"isKev":79,"epssScore":132},"CVE-2017-16670","The project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL project file.","2018-02-19",0.01625,[],[135,136,137,138,139,140,141,142,143,144],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},{"id":23,"product_name":24,"version_count":25,"cve_count":20,"kev_count":11,"last_cve_update":26},{"id":28,"product_name":29,"version_count":30,"cve_count":31,"kev_count":11,"last_cve_update":32},{"id":34,"product_name":35,"version_count":36,"cve_count":31,"kev_count":11,"last_cve_update":37},{"id":39,"product_name":40,"version_count":41,"cve_count":42,"kev_count":11,"last_cve_update":43},{"id":45,"product_name":46,"version_count":47,"cve_count":42,"kev_count":11,"last_cve_update":48},{"id":50,"product_name":51,"version_count":52,"cve_count":42,"kev_count":11,"last_cve_update":13},{"id":54,"product_name":55,"version_count":56,"cve_count":42,"kev_count":11,"last_cve_update":57},{"id":59,"product_name":60,"version_count":61,"cve_count":52,"kev_count":11,"last_cve_update":62},{"id":64,"product_name":65,"version_count":66,"cve_count":11,"kev_count":11,"last_cve_update":67},{"title":146,"metaDescription":147,"keywords":148,"structuredData":149},"Smartbear - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Smartbear covering 11 products with 22 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Smartbear vulnerabilities, Smartbear security, Smartbear CVE, Smartbear threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":150,"@type":151,"name":152,"description":147,"url":153},"https:\u002F\u002Fschema.org","Organization","Smartbear","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsmartbear",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":155,"apiVersion":156},"2026-10-17T14:58:27.319Z","3.0"]