WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product soap✕
Overview 17 matches · 3 in Waratek scope · 1 protected · 0 exploited · 0 CISA KEV · 2 public PoC · 0 EPSS ≥ 0.5
17matches 3in Waratek scope17.6% 1protected5.9% 0exploited0.0% 0CISA KEV0.0% 2public PoC11.8% 0EPSS ≥ 0.50.0%
Protected by Waratek 1 5.9% Rule in development 0 0.0% Mitigation candidate 1 5.9% No exploit published 1 5.9% Outside Waratek scope 0 0.0% Not applicable 14 82.4% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 17 100.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 5.9% partly blocked 0 0.0% not blocked 16 94.1% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 2 11.8% Proof of concept only 3 17.6% Forecast only 0 0.0% No public exploit 12 70.6%
split by peak 4 / year
Not applicable: 14No exploit published: 1Mitigation candidate: 1Protected by Waratek: 1 High: 17 not blocked: 16blocked by ARMR today: 1 No public exploit: 12Proof of concept only: 3Working exploit published: 2
20141 Mitigation candidate1 High1 not blocked1 Working exploit published1 20150 20160 20172 Not applicable2 High2 not blocked2 No public exploit2 20181 Not applicable1 High1 not blocked1 No public exploit1 20193 Not applicable3 High3 not blocked3 Working exploit published1 No public exploit2 20202 Not applicable2 High2 not blocked2 No public exploit2 20214 Not applicable4 High4 not blocked4 Proof of concept only2 No public exploit2 20221 Protected by Waratek1 High1 blocked by ARMR today1 No public exploit1 20230 20241 Not applicable1 High1 not blocked1 No public exploit1 20250 20262 No exploit published1 Not applicable1 High2 not blocked2 Proof of concept only1 No public exploit1
2014201620182020202220242026
17 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2026-46592 High 2026-07-06 No exploit published No public exploit Improper Input Validation, Unintended Proxy or Intermediary ('Confused Deputy') vulnerability in Apache Camel CXF SOAP component. The camel-cxf producer selects which SOAP operation to invoke on the backend service from the operationName (and operationNamespace) Exchange header, whose constant values (CxfConstants.OPERATION_NAME / OPERATION_NAMESPACE) were the plain strings operationName / operationNamespace. Because these names do not start with the Camel / camel prefix, HttpHeaderFilterStrategy - which blocks only the Camel header namespace on the HTTP boundary - let them pass from an inbound HTTP request straight into the Exchange. In a route that bridges an HTTP consumer (for example platform-http) into a cxf: producer, any HTTP client could therefore set the operationName header and have CxfProducer resolve and invoke a different WSDL operation than the route intended - for example replacing a read operation with a destructive one - against the backend SOAP service (a confused-deputy redirection). The constant is defined in the shared camel-cxf-common module, so the same non-prefixed names also applied to camel-cxfrs. No credentials are required when the bridging consumer is unauthenticated. This issue affects Apache Camel: from 4.0.0 before 4.14.8, from 4.15.0 before 4.18.3, from 4.19.0 before 4.21.0. Users are recommended to upgrade to version 4.21.0, which fixes the issue. If users are on the 4.14.x LTS releases stream, then they are suggested to upgrade to 4.14.8. If users are on the 4.18.x releases stream, then they are suggested to upgrade to 4.18.3. After upgrading, the operation-selection headers are named CamelCxfOperationName / CamelCxfOperationNamespace and are filtered at transport boundaries; see the 4.21 upgrade guide for the cross-transport carrier-header pattern. For deployments that cannot upgrade immediately, do not select the CXF operation from untrusted input: strip the operationName and operationNamespace headers from any untrusted ingress before the cxf: producer and set the operation from a trusted source in the route.
CVE-2019-25355 High 2026-02-18 Not applicable Proof of concept only gSOAP 2.8 contains a directory traversal vulnerability that allows unauthenticated attackers to access system files by manipulating HTTP path traversal techniques. Attackers can retrieve sensitive files like /etc/passwd by sending crafted GET requests with multiple '../' directory traversal sequences.
CVE-2024-7565 High 2024-11-22 Not applicable No public exploit SMARTBEAR SoapUI unpackageAll Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of SMARTBEAR SoapUI. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the unpackageAll function. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-19060.
CVE-2022-40705 High 2022-09-22 Protected by Waratek No public exploit An Improper Restriction of XML External Entity Reference vulnerability in RPCRouterServlet of Apache SOAP allows an attacker to read arbitrary files over HTTP. This issue affects Apache SOAP version 2.2 and later versions. It is unknown whether previous versions are also affected. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVE-2020-13578 High 2021-02-10 Not applicable Proof of concept only A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.
CVE-2020-13577 High 2021-02-10 Not applicable No public exploit A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.
CVE-2020-13575 High 2021-02-10 Not applicable Proof of concept only A denial-of-service vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.
CVE-2020-13574 High 2021-02-10 Not applicable No public exploit A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability.
CVE-2019-12180 High 2020-02-05 Not applicable No public exploit An issue was discovered in SmartBear ReadyAPI through 2.8.2 and 3.0.0 and SoapUI through 5.5. When opening a project, the Groovy "Load Script" is automatically executed. This allows an attacker to execute arbitrary Groovy Language code (Java scripting language) on the victim machine by inducing it to open a malicious Project. The same issue is present in the "Save Script" function, which is executed automatically when saving a project.
CVE-2012-6302 High 2020-01-24 Not applicable No public exploit Soapbox through 0.3.1: Sandbox bypass - runs a second instance of Soapbox within a sandboxed Soapbox.
CVE-2012-6071 High 2019-11-19 Not applicable No public exploit nuSOAP before 0.7.3-5 does not properly check the hostname of a cert.
CVE-2019-6973 High 2019-03-21 Not applicable Working exploit published Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server (based on gSOAP 2.8.x) is configured for an iterative queueing approach (aka non-threaded operation) with a timeout of several seconds.
CVE-2019-7659 High 2019-02-09 Not applicable No public exploit Genivia gSOAP 2.7.x and 2.8.x before 2.8.75 allows attackers to cause a denial of service (application abort) or possibly have unspecified other impact if a server application is built with the -DWITH_COOKIES flag. This affects the C/C++ libgsoapck/libgsoapck++ and libgsoapssl/libgsoapssl++ libraries, as these are built with that flag.
CVE-2017-16670 High 2018-02-19 Not applicable No public exploit The project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL project file.
CVE-2015-2297 High 2017-10-06 Not applicable No public exploit nanohttp in libcsoap allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Authorization header.
CVE-2017-9765 High 2017-07-20 Not applicable No public exploit Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via a large XML document, aka Devil's Ivy. NOTE: the large document would be blocked by many common web-server configurations on general-purpose computers.
CVE-2014-1202 High 2014-01-25 Mitigation candidate Working exploit published The WSDL/WADL import functionality in SoapUI before 4.6.4 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file.