Lucene search

MitreCVE-2023-37233

HistorySep 10, 2024 - 4:15 p.m.

CVE-2023-37233

2024-09-1016:15:18

CWE-611

mitre

web.nvd.nist.gov

loftware spectrum

xxe vulnerability

4.6 hf14

authenticated攞.security_document.lotware_spectrumapu

authenticatedxxe_attacks

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

31.0%

JSON

Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks.

Affected configurations

Nvd

Node

loftwarespectrumRange<4.6_hf14

VendorProductVersionCPE
loftwarespectrum*cpe:2.3:a:loftware:spectrum:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
loftware	spectrum	*	cpe:2.3:a:loftware:spectrum::::::::

References

code-white.com

code-white.com/public-vulnerability-list/

docs.loftware.com/spectrum-releasenotes/Content/Hotfix/4.6_HF14.htm

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

31.0%

JSON

Related for CVE-2023-37233