CVE-2023-37232

Loftware Spectrum (v4.6 and earlier) exposes sensitive information from logs to unauthorized actors. Documents consistently describe the issue as a disclosure of logs, impacting confidentiality (CVSSv3.1: HIGH, 7.5). The exact root cause, affected components, and remediation steps are not detaile...

CVE-2023-37234

Loftware Spectrum versions through 4.6 contain a security vulnerability due to an unprotected JMX Registry. Affected component: Loftware Spectrum (through 4.6). Reported impact includes exposure risks consistent with unprotected JMX access. The issue stems from the JMX Registry exposure; no explo...

CVE-2023-37229

Loftware Spectrum, an enterprise label printing solution, is vulnerable to Server-Side Request Forgery (SSRF) in versions prior to 5.1 . This vulnerability allows an attacker to trick the server into making requests to internal or external resources. To remediate this issue, users are recommended...

CVE-2023-37231

The Loftware Spectrum enterprise label printing solution, specifically versions prior to 4.6 HF14 , contains a hard-coded password . This vulnerability could potentially allow unauthorized access to the system. To remediate this issue, users should update to version 4.6 HF14 or later . As a tempo...

CVE-2023-37226

Loftware Spectrum, an enterprise label printing platform, is vulnerable to a Missing Authentication for a Critical Function in versions prior to 4.6 HF14 . This flaw allows unauthorized access to critical functionality, potentially impacting the integrity and availability of the system. Remediati...

CVE-2023-37230

The enterprise label printing solution Loftware Spectrum is vulnerable to Server-Side Request Forgery (SSRF) in versions prior to 5.1 . The flaw exists within the testDeviceConnection function. This vulnerability allows an attacker to potentially trigger requests from the server to internal or ex...

CVE-2023-37233

CVE-2023-37233 affects Loftware Spectrum prior to version 4.6 HF14. The issue is an authenticated XML External Entity (XXE) vulnerability in the product’s XML processing, leading to potential high-impact exposure per CVSS (Confidentiality, Integrity, Availability: HIGH). Connected documents confi...

CVE-2023-37227

Loftware Spectrum versions prior to 4.6 HF13 are vulnerable to a security flaw caused by the deserialization of untrusted data . This vulnerability allows for potential exploitation of the cloud-based label printing platform. To remediate this issue, users are recommended to update to version 4.6...