CVE-2023-37233

EUVD-2023-41153
Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
loftwarespectrum
𝑥
< 4.6_hf14
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
loftwarespectrum
𝑥
< 4.6 HF14
ADP
Common Weakness Enumeration
References
https://code-white.com
https://code-white.com/public-vulnerability-list/
https://docs.loftware.com/spectrum-releasenotes/Content/Hotfix/4.6_HF14.htm