The WSDL/WADL import functionality in SoapUI before 4.6.4 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file.
CVSS 2.0HIGH 9.3·Network·No auth·Interaction —·EPSS 0.07673·Published 2014-01-25·Fixed in 4.6.4CWE-94