CVE-2023-37232

Loftware Spectrum through 4.6 exposes Sensitive Information (Logs) to an Unauthorized Actor.

CVE-2023-37234

Loftware Spectrum through 4.6 has unprotected JMX Registry.

CVE-2023-37231

Loftware Spectrum before 4.6 HF14 uses a Hard-coded Password.

CVE-2023-37229

Loftware Spectrum before 5.1 allows SSRF.

CVE-2023-37230

Loftware Spectrum (testDeviceConnection) before 5.1 allows SSRF.

CVE-2023-37226

Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function.

CVE-2023-37227

Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data.

CVE-2023-37233

Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks.