SmartBear
Security Risk Profile
41
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 25 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 25, 2014 to present
25
Total CVEs
15
Critical+High
0
Exploited
12
Unpatched
Threat Assessment
Avg CVSS
7.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
12
Critical/High
Risk Level
41/100
medium
Severity Distribution
Critical
7High
8Medium
10Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
XSS
4
2
Code Injection
3
3
Command Injection
2
4
Input Validation
2
5
Path Traversal
1
Most Affected Products
1. SMARTBEAR SoapUI17
2. Eviware Soapui6
3. Oracle Banking Apis5
4. Oracle Banking Digital Experience5
5. SMARTBEAR Zephyr Enterprise4
Recent Vulnerabilities
See more →CVE-2025-29155
CVSS 6.5medium
9/25/2025🔧 No Patch
CVE-2025-29157
CVSS 6.5medium
9/25/2025🔧 No Patch
CVE-2025-29156
CVSS 6.1medium
9/25/2025🔧 No Patch
CVE-2024-7565
CVSS 7.8high
SMARTBEAR SoapUI unpackageAll Directory Traversal Remote Code Execution Vulnerability
11/22/2024🔧 No Patch
ZDI-24-1100
CVSS 7.8high
SMARTBEAR SoapUI unpackageAll Directory Traversal Remote Code Execution Vulnerability
8/6/2024🔧 No Patch
ZDI-CAN-19060
CVSS 7.8high
ZDI-24-1100: SMARTBEAR SoapUI unpackageAll Directory Traversal Remote Code Execution Vulnerability
8/6/2024🔧 No Patch
CVE-2024-22207
CVSS 5.3EPSS 0%medium
Default swagger-ui configuration exposes all files in the module
1/15/2024
CVE-2023-22891
CVSS 8.1high
3/8/2023🔧 No Patch
CVE-2023-22892
CVSS 7.5high
3/8/2023🔧 No Patch
CVE-2023-22889
CVSS 9.8critical
3/8/2023🔧 No Patch
Monitor SmartBear in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.