3 matches found
CVE-2014-1202
The WSDL/WADL import functionality in SoapUI before 4.6.4 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file...
9.3CVSS0.07673EPSS
SaveExploits7References8
PT-2014-4010
Name of the Vulnerable Software and Affected Versions SoapUI versions prior to 4.6.4 Description The issue concerns the WSDL/WADL import functionality, which allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file. Recommendations For versions prior t...
9.3CVSS0.07673EPSS
SaveExploits7References10
CVE-2014-1202: Improper Control of Generation of Code
The WSDL/WADL import functionality in SoapUI before 4.6.4 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file...
9.3CVSS6.3AI score0.07673EPSS
SaveExploits7References2
20