Loftware Spectrum (testDeviceConnection) before 5.1 allows SSRF.

Loftware Spectrum before 5.1 allows SSRF.

Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function.

Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data.

Loftware Spectrum before 4.6 HF14 uses a Hard-coded Password.

Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks.

Loftware Spectrum through 4.6 has unprotected JMX Registry.

Loftware Spectrum through 4.6 exposes Sensitive Information (Logs) to an Unauthorized Actor.