Vendor
SMARTBEAR
23 known vulnerabilities in products by SMARTBEAR, 0 of them actively exploited (CISA KEV).
Key figures
23
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2020-12835 | SmartBear ReadyAPI: Remote Code Execution | 9.8 | |
| Critical | CVE-2019-17495 | SmartBear Swagger UI: Cross-Site Request Forgery (CSRF) | 9.8 | |
| High | CVE-2018-20580 | SmartBear ReadyAPI: security vulnerability | 8.8 | |
| High | CVE-2020-26118 | SMARTBEAR Collaborator: Deserialization of Untrusted Data | 8.8 | |
| High | CVE-2019-12180 | SmartBear ReadyAPI: security vulnerability | 7.8 | |
| Medium | CVE-2018-25031 | SmartBear Swagger UI: Spoofing | 4.3 | |
| Medium | CVE-2016-1000229 | Smartbear Swagger-ui: Cross-Site Scripting (XSS) | 6.1 | |
| Critical | CVE-2023-22889 | SMARTBEAR Zephyr Enterprise: Remote Code Execution | 9.8 | |
| Medium | CVE-2024-22207 | Default swagger-ui configuration exposes all files in the module | 5.3 | |
| High | CVE-2017-16670 | SMARTBEAR SoapUI: security vulnerability | 7.8 | |
| High | CVE-2024-7565 | SMARTBEAR SoapUI unpackageAll Directory Traversal Remote Code Execution Vulnerability | 7.8 | |
| Medium | CVE-2021-46708 | SMARTBEAR Swagger-ui-dist: security vulnerability | 6.1 | |
| Not rated | CVE-2014-1202 | SMARTBEAR SoapUI: security vulnerability | — | |
| Medium | CVE-2016-5682 | Smartbear Swagger-ui: Cross-Site Scripting (XSS) | 6.1 | |
| High | CVE-2023-22890 | SMARTBEAR Zephyr Enterprise: Denial of Service | 7.5 | |
| Medium | CVE-2025-29157 | SMARTBEAR Swagger Petstore: Code Execution | 6.5 | |
| High | CVE-2023-22892 | SMARTBEAR Zephyr Enterprise: Information Disclosure | 7.5 | |
| High | CVE-2023-22891 | SMARTBEAR Zephyr Enterprise: Privilege Escalation | 8.1 | |
| Medium | CVE-2021-41657 | SMARTBEAR Collaborator: Clickjacking | 6.1 | |
| Medium | CVE-2025-29155 | SMARTBEAR Swagger Petstore: Code Execution | 6.5 | |
| Medium | CVE-2025-29156 | SMARTBEAR Swagger Petstore: Cross-Site Scripting (XSS) | 6.1 | |
| High | CVE-2021-21363 | Generator Web Application: Local Privilege Escalation Vulnerability via System Temp Directory | 5.3 | |
| Medium | CVE-2021-21364 | Generated Code Contains Local Information Disclosure Vulnerability | 5.3 |
Products
| SmartBear Swagger UI | 5 | 0 |
| SMARTBEAR SoapUI | 4 | 0 |
| Zephyr Enterprise | 4 | 0 |
| SmartBear ReadyAPI | 3 | 0 |
| Swagger Petstore | 3 | 0 |