Smartbear vulnerabilities

Products

• Soapui 4
• Zephyr Enterprise 4
• Readyapi 3
• Swagger Petstore 3
• Swagger Ui 3
• Collaborator 2
• Swagger-codegen 2
• Swagger-ui 2

Newest

• smartbear swagger petstore An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via accessing a... CVE-2025-29157 6.5 MediumSeptember 25, 2025
• smartbear swagger petstore Cross Site Scripting vulnerability in petstore v.1.0.7 allows a remote attacker to execute... CVE-2025-29156 6.1 MediumSeptember 25, 2025
• smartbear swagger petstore An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via the DELETE... CVE-2025-29155 6.5 MediumSeptember 25, 2025
• smartbear soapui SMARTBEAR SoapUI unpackageAll Directory Traversal Remote Code Execution Vulnerability CVE-2024-7565 7.8 HighNovember 22, 2024
• fastify fastify-swagger-ui, smartbear swagger ui +1 more Default swagger-ui configuration exposes all files in the module CVE-2024-22207 Fix available 5.3 MediumJanuary 15, 2024
• smartbear zephyr enterprise There exists an information disclosure vulnerability in SmartBear Zephyr Enterprise through 7.15... CVE-2023-22892 7.5 HighMarch 8, 2023
• smartbear zephyr enterprise There exists a privilege escalation vulnerability in SmartBear Zephyr Enterprise through 7.15.0... CVE-2023-22891 8.1 HighMarch 8, 2023
• smartbear zephyr enterprise SmartBear Zephyr Enterprise through 7.15.0 allows unauthenticated users to upload large files,... CVE-2023-22890 7.5 HighMarch 8, 2023
• smartbear zephyr enterprise SmartBear Zephyr Enterprise through 7.15.0 mishandles user-defined input during report generation... CVE-2023-22889 9.8 CriticalMarch 8, 2023
• smartbear swagger ui Spoofing attack in swagger-ui CVE-2018-25031 Public exploitFix available EPSS 42.3% 4.3 MediumMarch 11, 2022
• smartbear collaborator SmartBear CodeCollaborator v6.1.6102 was discovered to contain a vulnerability in the web UI... CVE-2021-41657 6.1 MediumMarch 7, 2022
• smartbear swagger-ui-dist Spoofing attack in swagger-ui-dist CVE-2021-46708 Fix available 6.1 MediumDecember 9, 2021
• smartbear swagger-codegen Generator Web Application: Local Privilege Escalation Vulnerability via System Temp Directory CVE-2021-21363 Fix available 5.3 MediumMarch 11, 2021
• smartbear swagger-codegen Generated Code Contains Local Information Disclosure Vulnerability CVE-2021-21364 Fix available 5.3 MediumMarch 11, 2021
• smartbear collaborator In SmartBear Collaborator Server through 13.3.13302, use of the Google Web Toolkit (GWT) API... CVE-2020-26118 8.8 HighJanuary 11, 2021
• smartbear readyapi An issue was discovered in SmartBear ReadyAPI SoapUI Pro 3.2.5. Due to unsafe use of an Java RMI... CVE-2020-12835 EPSS 13.3% 9.8 CriticalMay 20, 2020
• smartbear readyapi, soapui +1 more An issue was discovered in SmartBear ReadyAPI through 2.8.2 and 3.0.0 and SoapUI through 5.5.... CVE-2019-12180 Public exploit 7.8 HighFebruary 5, 2020
• smartbear swagger-ui, redhat jboss fuse, openshift +2 more Improper Neutralization of Input During Web Page Generation in swagger-ui CVE-2016-1000229 Public exploitFix available 6.1 MediumDecember 20, 2019
• smartbear swagger ui, oracle banking apis, banking digital experience +3 more +5 more Cross-site scripting in Swagger-UI CVE-2019-17495 Public exploitFix available 9.8 CriticalOctober 10, 2019
• smartbear readyapi The WSDL import functionality in SmartBear ReadyAPI 2.5.0 and 2.6.0 allows remote attackers to... CVE-2018-20580 Public exploit 8.8 HighMay 3, 2019
• smartbear soapui The project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary... CVE-2017-16670 7.8 HighFebruary 19, 2018
• smartbear swagger-ui Cross-Site Scripting in swagger-ui CVE-2016-5682 Fix available 6.1 MediumApril 10, 2017
• eviware soapui Code injection via property expansion in SoapUI CVE-2014-1202 Public exploitFix available 9.3 HighJanuary 25, 2014