Login Request a demo
SU
Product
Swagger UI
by Smartbear · last CVE Jan 15, 2024
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 0Medium 4Low 0
Severity
All severities5Critical1High0Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Swagger UI to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-17495
9.8
6%
Oct 10
A Cascading Style Sheets (CSS) injection vulnerability in Swagger UI before 3.23.11 allows attackers to use the Relative Path Overwrite (RPO) technique to perform CSS-based input…
Affected: before 3.23.11
CVE-2016-1000229
6.1
4%
Dec 20
swagger-ui has XSS in key names
Affected: All versions, or not specified
CVE-2016-5682
6.1
1%
Apr 10
Swagger-UI before 2.2.1 has XSS via the Default field in the Definitions section
Affected: before 2.2.1
CVE-2024-22207
5.3
2%
Jan 15
fastify-swagger-ui is a Fastify plugin for serving Swagger UI
Affected: 2.0.0 before 2.1.0
CVE-2018-25031
4.3
42%
Mar 11
Swagger UI 4.1.2 and earlier could allow a remote attacker to conduct spoofing attacks
Affected: before 4.1.3
Showing 5