HighCVSS 8.8
EPSS 0.37%
Loftware Spectrum (testDeviceConnection) before 5.1 allows SSRF.
Product
loftware spectrum vulnerabilities
8 published CVES affecting loftware spectrum, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 8
- Critical
- 4
- High
- 4
- Medium
- 0
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest loftware spectrum CVEs
Newest publication first
-
-
CVE-2023-37226 Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function.
PublishedCriticalCVSS 9.8 EPSS 0.58%Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function.
-
CriticalCVSS 9.8 EPSS 0.52%
Loftware Spectrum before 4.6 HF14 uses a Hard-coded Password.
-
HighCVSS 8.8 EPSS 0.37%
Loftware Spectrum before 5.1 allows SSRF.
-
HighCVSS 7.5 EPSS 0.38%
Loftware Spectrum through 4.6 exposes Sensitive Information (Logs) to an Unauthorized Actor.
-
CriticalCVSS 9.8 EPSS 0.40%
Loftware Spectrum through 4.6 has unprotected JMX Registry.
-
HighCVSS 8.8 EPSS 0.45%
Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks.
-
CriticalCVSS 9.8 EPSS 0.62%
Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.