SP
Product
Spectrum
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 4Medium 0Low 0
Watch
Add Spectrum to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-37234 | 9.8 | Sep 10 | Loftware Spectrum through 4.6 has unprotected JMX Registry Affected: through 4.6 |
| CVE-2023-37227 | 9.8 | Sep 10 | Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data Affected: before 4.6; 4.6; 4.6; 4.6; 4.6; 4.6; +7 more |
| CVE-2023-37231 | 9.8 | Sep 10 | Loftware Spectrum before 4.6 HF14 uses a Hard-coded Password Affected: before 4.6; 4.6; 4.6; 4.6; 4.6; 4.6; +8 more |
| CVE-2023-37226 | 9.8 | Sep 10 | Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function Affected: before 4.6; 4.6; 4.6; 4.6; 4.6; 4.6; +8 more |
| CVE-2023-37233 | 8.8 | Sep 10 | Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks Affected: before 4.6_hf14 |
| CVE-2023-37229 | 8.8 | Sep 10 | Loftware Spectrum before 5.1 allows SSRF Affected: before 5.1 |
| CVE-2023-37230 | 8.8 | Sep 10 | Loftware Spectrum (testDeviceConnection) before 5.1 allows SSRF Affected: before 5.1 |
| CVE-2023-37232 | 7.5 | Sep 10 | Loftware Spectrum through 4.6 exposes Sensitive Information (Logs) to an Unauthorized Actor Affected: through 4.6 |
Showing 8