Browse CVEs

Spectrum CRITICAL 9.8

CVE-2023-37234

Loftware Spectrum through 4.6 has unprotected JMX Registry.

Fix: after 4.6

Fix from $2,300 2024-09-10

Spectrum HIGH 8.8

CVE-2023-37233

Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks.

Fix: 4.6_hf14+

Fix from $1,950 2024-09-10

Spectrum HIGH 7.5

CVE-2023-37232

Loftware Spectrum through 4.6 exposes Sensitive Information (Logs) to an Unauthorized Actor.

Fix: after 4.6

Fix from $1,950 2024-09-10

Spectrum CRITICAL 9.8

CVE-2023-37227

Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data.

Fix: 4.6+

Fix from $2,300 2024-09-10

Spectrum CRITICAL 9.8

CVE-2023-37231

Loftware Spectrum before 4.6 HF14 uses a Hard-coded Password.

Fix: 4.6+

Fix from $2,300 2024-09-10

Spectrum HIGH 8.8

CVE-2023-37229

Loftware Spectrum before 5.1 allows SSRF.

Fix: 5.1+

Fix from $1,950 2024-09-10

Spectrum HIGH 8.8

CVE-2023-37230

Loftware Spectrum (testDeviceConnection) before 5.1 allows SSRF.

Fix: 5.1+

Fix from $1,950 2024-09-10

Spectrum CRITICAL 9.8

CVE-2023-37226

Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function.

Fix: 4.6+

Fix from $2,300 2024-09-10