PatchTheCVE: spectrumhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2023-37234: Loftware Spectrum through 4.6 has unprotected JMX Registry.https://patchthecve.com/cve/CVE-2023-37234.htmlhttps://patchthecve.com/cve/CVE-2023-37234.htmlWed, 17 Jun 2026 06:07:47 +0000CRITICAL 9.8: Loftware Spectrum through 4.6 has unprotected JMX Registry.CVE-2023-37233: Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks.https://patchthecve.com/cve/CVE-2023-37233.htmlhttps://patchthecve.com/cve/CVE-2023-37233.htmlWed, 17 Jun 2026 06:07:47 +0000HIGH 8.8: Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks.CVE-2023-37232: Loftware Spectrum through 4.6 exposes Sensitive Information (Logs) to an Unauthorized Actor.https://patchthecve.com/cve/CVE-2023-37232.htmlhttps://patchthecve.com/cve/CVE-2023-37232.htmlWed, 17 Jun 2026 06:07:47 +0000HIGH 7.5: Loftware Spectrum through 4.6 exposes Sensitive Information (Logs) to an Unauthorized Actor.CVE-2023-37231: Loftware Spectrum before 4.6 HF14 uses a Hard-coded Password.https://patchthecve.com/cve/CVE-2023-37231.htmlhttps://patchthecve.com/cve/CVE-2023-37231.htmlWed, 17 Jun 2026 06:07:46 +0000CRITICAL 9.8: Loftware Spectrum before 4.6 HF14 uses a Hard-coded Password.CVE-2023-37230: Loftware Spectrum (testDeviceConnection) before 5.1 allows SSRF.https://patchthecve.com/cve/CVE-2023-37230.htmlhttps://patchthecve.com/cve/CVE-2023-37230.htmlWed, 17 Jun 2026 06:07:46 +0000HIGH 8.8: Loftware Spectrum (testDeviceConnection) before 5.1 allows SSRF.CVE-2023-37229: Loftware Spectrum before 5.1 allows SSRF.https://patchthecve.com/cve/CVE-2023-37229.htmlhttps://patchthecve.com/cve/CVE-2023-37229.htmlWed, 17 Jun 2026 06:07:46 +0000HIGH 8.8: Loftware Spectrum before 5.1 allows SSRF.CVE-2023-37227: Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data.https://patchthecve.com/cve/CVE-2023-37227.htmlhttps://patchthecve.com/cve/CVE-2023-37227.htmlWed, 17 Jun 2026 06:07:46 +0000CRITICAL 9.8: Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data.CVE-2023-37226: Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function.https://patchthecve.com/cve/CVE-2023-37226.htmlhttps://patchthecve.com/cve/CVE-2023-37226.htmlWed, 17 Jun 2026 06:07:46 +0000CRITICAL 9.8: Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function.