En bref
- CVE-2014-1202 est une vulnérabilité CRITIQUE (CVSS 9.3) touchant com.smartbear.soapui:soapui, soapui (eviware), soapui (smartbear).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 7.7%, plus élevée que 94.6% des vulnérabilités.
- Correctif : mettre à jour vers 4.6.4 ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| com.smartbear.soapui:soapui Maven | < 4.6.4
| 4.6.4
|
| soapui | = 2.5.1= 3.0.1= 3.5= 3.5.1= 3.6= 3.6.1
| No fix yet |
| soapui | = 4.0= 4.0.1= 4.5= 4.5.1= 4.5.2= 4.6.0= 4.6.1= 4.6.2≤ 4.6.3
| No fix yet |
Description
The WSDL/WADL import functionality in SoapUI before 4.6.4 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file.
NVD description
The WSDL/WADL import functionality in SoapUI before 4.6.4 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free