TI-2023-18866 CVE-2023-37234 · GHSA-xgjv-9929-vw26
Loftware Spectrum through 4.6 has unprotected JMX Registry.
Priority MEDIUM 48
Loftware Spectrum through 4.6 has unprotected JMX Registry.
Vulnerabilities
8 records
TI-2023-18865 CVE-2023-37233 · GHSA-33jw-2jpq-625x
Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks.
Priority MEDIUM 40
Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks.
TI-2023-18864 CVE-2023-37232 · GHSA-mm7m-mg28-rj6q
Loftware Spectrum through 4.6 exposes Sensitive Information (Logs) to an Unauthorized Actor.
Priority LOW 39
Loftware Spectrum through 4.6 exposes Sensitive Information (Logs) to an Unauthorized Actor.
TI-2023-18863 CVE-2023-37231 · GHSA-jvc3-9vpf-mx93
Loftware Spectrum before 4.6 HF14 uses a Hard-coded Password.
Priority MEDIUM 49
Loftware Spectrum before 4.6 HF14 uses a Hard-coded Password.
TI-2023-18862 CVE-2023-37230 · GHSA-3g3x-qrhw-j5jj
Loftware Spectrum (testDeviceConnection) before 5.1 allows SSRF.
Priority MEDIUM 40
Loftware Spectrum (testDeviceConnection) before 5.1 allows SSRF.
TI-2023-18861 CVE-2023-37229 · GHSA-82mg-vc5c-pcm3
Loftware Spectrum before 5.1 allows SSRF.
Priority MEDIUM 40
Loftware Spectrum before 5.1 allows SSRF.
TI-2023-18860 CVE-2023-37227 · GHSA-cgp2-rgv5-7hcp
Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data.
Priority MEDIUM 50
Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data.
TI-2023-18859 CVE-2023-37226 · GHSA-8635-cr25-p8xq
Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function.
Priority MEDIUM 50
Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function.