SM
Vendor
Smartbear
24
CVEs
0
On KEV
0
New 30D
Products
SU9.8
Swagger UI
Smartbear
5 CVEs0 on KEV0 new
SO7.8
Soapui
Smartbear
4 CVEs0 on KEV0 new
ZE9.8
Zephyr Enterprise
Smartbear
4 CVEs0 on KEV0 new
RE9.8
Readyapi
Smartbear
3 CVEs0 on KEV0 new
SP6.5
Swagger Petstore
Smartbear
3 CVEs0 on KEV0 new
CO8.8
Collaborator
Smartbear
2 CVEs0 on KEV0 new
SW7.0
Swagger-codegen
Smartbear
2 CVEs0 on KEV0 new
SW6.1
Swagger-ui-dist
Smartbear
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-29157 | SP Swagger Petstore Smartbear | 6.5 | Sep 25 | An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via accessing a non-existent endpoint/cart, the server returns a 404-error page exposing sensitive… |
| CVE-2025-29156 | SP Swagger Petstore Smartbear | 6.1 | Sep 25 | Cross Site Scripting vulnerability in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via a crafted script to the /api/v3/pet |
| CVE-2025-29155 | SP Swagger Petstore Smartbear | 6.5 | Sep 25 | An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via the DELETE endpoint |
| CVE-2024-7565 | SO Soapui Smartbear | 7.8 | Nov 22 | SMARTBEAR SoapUI unpackageAll Directory Traversal Remote Code Execution Vulnerability |
| CVE-2024-22207 | SU Swagger UI Smartbear | 5.3 | Jan 15 | fastify-swagger-ui is a Fastify plugin for serving Swagger UI |
| CVE-2023-22892 | ZE Zephyr Enterprise Smartbear | 7.5 | Mar 8 | There exists an information disclosure vulnerability in SmartBear Zephyr Enterprise through 7.15.0 that could be exploited by unauthenticated users to read arbitrary files from… |
| CVE-2023-22891 | ZE Zephyr Enterprise Smartbear | 8.1 | Mar 8 | There exists a privilege escalation vulnerability in SmartBear Zephyr Enterprise through 7.15.0 that could be exploited by authorized users to reset passwords for other accounts |
| CVE-2023-22890 | ZE Zephyr Enterprise Smartbear | 7.5 | Mar 8 | SmartBear Zephyr Enterprise through 7.15.0 allows unauthenticated users to upload large files, which could exhaust the local drive space, causing a denial of service condition |
| CVE-2023-22889 | ZE Zephyr Enterprise Smartbear | 9.8 | Mar 8 | SmartBear Zephyr Enterprise through 7.15.0 mishandles user-defined input during report generation |
| CVE-2021-46708 | SW Swagger-ui-dist Smartbear | 6.1 | Mar 11 | The swagger-ui-dist package before 4.1.3 for Node.js could allow a remote attacker to hijack the clicking action of the victim |
| CVE-2018-25031 | SU Swagger UI Smartbear | 4.3 | Mar 11 | Swagger UI 4.1.2 and earlier could allow a remote attacker to conduct spoofing attacks |
| CVE-2021-41657 | CO Collaborator Smartbear | 6.1 | Mar 10 | SmartBear CodeCollaborator v6.1.6102 was discovered to contain a vulnerability in the web UI which would allow an attacker to conduct a clickjacking attack |
| CVE-2021-21364 | SW Swagger-codegen Smartbear | 5.5 | Mar 11 | swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your… |
| CVE-2021-21363 | SW Swagger-codegen Smartbear | 7.0 | Mar 11 | swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your… |
| CVE-2020-26118 | CO Collaborator Smartbear | 8.8 | Jan 11 | In SmartBear Collaborator Server through 13.3.13302, use of the Google Web Toolkit (GWT) API introduces a post-authentication Java deserialization vulnerability |
| CVE-2020-12835 | RE Readyapi Smartbear | 9.8 | May 20 | An issue was discovered in SmartBear ReadyAPI SoapUI Pro 3.2.5 |
| CVE-2019-12180 | RE Readyapi Smartbear | 7.8 | Feb 5 | An issue was discovered in SmartBear ReadyAPI through 2.8.2 and 3.0.0 and SoapUI through 5.5 |
| CVE-2016-1000229 | SW Swagger-ui Smartbear | 6.1 | Dec 20 | swagger-ui has XSS in key names |
| CVE-2019-17495 | SU Swagger UI Smartbear | 9.8 | Oct 10 | A Cascading Style Sheets (CSS) injection vulnerability in Swagger UI before 3.23.11 allows attackers to use the Relative Path Overwrite (RPO) technique to perform CSS-based input… |
| CVE-2018-20580 | RE Readyapi Smartbear | 8.8 | May 3 | The WSDL import functionality in SmartBear ReadyAPI 2.5.0 and 2.6.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file |
| CVE-2017-16670 | SO Soapui Smartbear | 7.8 | Feb 19 | The project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL project file |
| CVE-2016-5682 | SW Swagger-ui Smartbear | 6.1 | Apr 10 | Swagger-UI before 2.2.1 has XSS via the Default field in the Definitions section |
| CVE-2014-1202 | SO Soapui Smartbear | – | Jan 25 | The WSDL/WADL import functionality in SoapUI before 4.6.4 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file |