Browse CVEs

CRITICAL 9.8 CVE-2023-37234 Loftware Spectrum through 4.6 has unprotected JMX Registry. Spectrum after 4.6 Fix from $2,3002024-09-10 HIGH 8.8 CVE-2023-37233 Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks. Spectrum 4.6_hf14+ Fix from $1,9502024-09-10 HIGH 7.5 CVE-2023-37232 Loftware Spectrum through 4.6 exposes Sensitive Information (Logs) to an Unauthorized Actor. Spectrum after 4.6 Fix from $1,9502024-09-10 CRITICAL 9.8 CVE-2023-37227 Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data. Spectrum 4.6+ Fix from $2,3002024-09-10 CRITICAL 9.8 CVE-2023-37231 Loftware Spectrum before 4.6 HF14 uses a Hard-coded Password. Spectrum 4.6+ Fix from $2,3002024-09-10 HIGH 8.8 CVE-2023-37229 Loftware Spectrum before 5.1 allows SSRF. Spectrum 5.1+ Fix from $1,9502024-09-10 HIGH 8.8 CVE-2023-37230 Loftware Spectrum (testDeviceConnection) before 5.1 allows SSRF. Spectrum 5.1+ Fix from $1,9502024-09-10 CRITICAL 9.8 CVE-2023-37226 Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function. Spectrum 4.6+ Fix from $2,3002024-09-10