7 matches found
CVE-2023-37233
Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks...
8.8CVSS0.00445EPSS
SaveExploits0References3
CVE-2023-37231
Loftware Spectrum before 4.6 HF14 uses a Hard-coded Password...
9.8CVSS0.00516EPSS
SaveExploits0References3
CVE-2023-37226
Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function...
9.8CVSS0.00579EPSS
SaveExploits0References3
CVE-2023-37233
Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks...
7AI score0.00445EPSS
SaveExploits0References3
CVE-2023-37233
CVE-2023-37233 affects Loftware Spectrum prior to version 4.6 HF14. The issue is an authenticated XML External Entity (XXE) vulnerability in the product’s XML processing, leading to potential high-impact exposure per CVSS (Confidentiality, Integrity, Availability: HIGH). Connected documents confi...
8.8CVSS6.8AI score0.00445EPSS
SaveExploits0References3Affected Software1
20