CVE-2017-16670 describes a critical vulnerability in SoapUI 5.3.0, where a crafted WSDL project file can be used during project import to execute arbitrary Java code. This vulnerability carries a CVSS score of 7.8 (High), indicating a significant risk due to its potential for complete compromise of confidentiality, integrity, and availability, requiring user interaction but not authentication. While no active exploits, Metasploit modules, or public exploit code are currently identified, and community discussion is minimal, the high severity warrants attention. Organizations using affected versions of SoapUI should prioritize patching or implementing mitigating controls to prevent potential exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
5.3.0CPE matchmatch criteria | cpe:2.3:a:smartbear:soapui:5.3.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.