Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2018/02/20 12:48 a.m.•36 views

CVE-2017-16670

The project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL project file...

8.8CVSS7.5AI score0.01625EPSS
SaveExploits2References1
Prion
Prion
•added 2018/02/19 7:29 p.m.•25 views

Code injection

The project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL project file...

6.8CVSS7.8AI score0.01625EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2018/02/19 7:00 p.m.•49 views

CVE-2017-16670

The project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL project file...

7.8AI score0.01625EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2018/02/19 12:00 a.m.•2 views

PT-2018-6303

Name of the Vulnerable Software and Affected Versions: SoapUI version 5.3.0 Description: The issue allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL project file. Recommendations: For SoapUI version 5.3.0, consider restricting access to the project...

7.8CVSS0.01625EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/19 12:00 a.m.•9 views

CVE-2017-16670: Improper Control of Generation of Code

The project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL project file...

7.8CVSS7.8AI score0.01625EPSS
SaveExploits2References2
Rows per page
Query Builder