CVE-2018-20580

The WSDL import functionality in SmartBear ReadyAPI 2.5.0 and 2.6.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a…

published May 3, 2019

CVSS

—

EPSS

10%

Percentile

95.5

In the wild

Unconfirmed

What it is

The WSDL import functionality in SmartBear ReadyAPI 2.5.0 and 2.6.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.09786 · 95.5th percentile
Published: 2019-05-03T19:57Z

EPSS history

Timeline

03 MAY 19:57Z
The WSDL import functionality in SmartBear ReadyAPI 2.5.0 and 2.6.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a…
cvelistv5