TI-2023-18860 CVE-2023-37227 · GHSA-cgp2-rgv5-7hcp
Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data.
Priority MEDIUM 50
Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data.
Loftware
Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Loftware records in CISA KEVNo Loftware vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
8 records
TI-2023-18859 CVE-2023-37226 · GHSA-8635-cr25-p8xq
Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function.
Priority MEDIUM 50
Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function.
TI-2023-18863 CVE-2023-37231 · GHSA-jvc3-9vpf-mx93
Loftware Spectrum before 4.6 HF14 uses a Hard-coded Password.
Priority MEDIUM 49
Loftware Spectrum before 4.6 HF14 uses a Hard-coded Password.
TI-2023-18866 CVE-2023-37234 · GHSA-xgjv-9929-vw26
Loftware Spectrum through 4.6 has unprotected JMX Registry.
Priority MEDIUM 48
Loftware Spectrum through 4.6 has unprotected JMX Registry.
TI-2023-18865 CVE-2023-37233 · GHSA-33jw-2jpq-625x
Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks.
Priority MEDIUM 40
Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks.
TI-2023-18862 CVE-2023-37230 · GHSA-3g3x-qrhw-j5jj
Loftware Spectrum (testDeviceConnection) before 5.1 allows SSRF.
Priority MEDIUM 40
Loftware Spectrum (testDeviceConnection) before 5.1 allows SSRF.
TI-2023-18861 CVE-2023-37229 · GHSA-82mg-vc5c-pcm3
Loftware Spectrum before 5.1 allows SSRF.
Priority MEDIUM 40
Loftware Spectrum before 5.1 allows SSRF.
TI-2023-18864 CVE-2023-37232 · GHSA-mm7m-mg28-rj6q
Loftware Spectrum through 4.6 exposes Sensitive Information (Logs) to an Unauthorized Actor.
Priority LOW 39
Loftware Spectrum through 4.6 exposes Sensitive Information (Logs) to an Unauthorized Actor.