CVE-2023-37229

The Loftware Spectrum enterprise label printing solution (versions prior to 5.1 ) is vulnerable to Server-Side Request Forgery (SSRF) . This flaw allows an attacker to trick the server into making unauthorized requests to internal or external resources. To remediate this issue, users should updat...

CVE-2023-37233

CVE-2023-37233 affects Loftware Spectrum prior to version 4.6 HF14. The issue is an authenticated XML External Entity (XXE) vulnerability in the product’s XML processing, leading to potential high-impact exposure per CVSS (Confidentiality, Integrity, Availability: HIGH). Connected documents confi...

CVE-2023-37226

Loftware Spectrum, an enterprise label printing platform, is vulnerable to a Missing Authentication for a Critical Function in versions prior to 4.6 HF14 . This flaw allows unauthorized access to critical functionality, potentially impacting the integrity and availability of the system. Remediati...

CVE-2023-37227

Loftware Spectrum versions prior to 4.6 HF13 are vulnerable to a security flaw caused by the deserialization of untrusted data . This vulnerability allows for potential exploitation of the cloud-based label printing platform. To remediate this issue, users are recommended to update to version 4.6...

CVE-2023-37230

The enterprise label printing solution Loftware Spectrum is vulnerable to Server-Side Request Forgery (SSRF) in versions prior to 5.1 . The flaw exists within the testDeviceConnection function. This vulnerability allows an attacker to potentially trigger requests from the server to internal or ex...

CVE-2023-37231

The Loftware Spectrum enterprise label printing solution, specifically versions prior to 4.6 HF14 , contains a hard-coded password . This vulnerability could potentially allow unauthorized access to the system. To remediate this issue, users should update to version 4.6 HF14 or later . As a tempo...