Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Loftware

First CVE: Sep 10, 2024Active for: 2 yearsTotal CVEs: 8

Loftware develops label-management and enterprise-printing software, with its Spectrum product serving as a core component for organizations managing print operations and regulatory compliance across supply chains. Vulnerabilities affecting the vendor skew strongly toward critical-severity outcomes and recur through structural weaknesses in server-request handling, data deserialization, access control, and sensitive-information disclosure that are characteristic of server-side application platforms. Defenders should prioritize updates to internet-exposed Spectrum instances and review access controls around print infrastructure; current exploitation activity and severity counts are shown alongside this summary.

FAUCET AI Generated
8
Total CVEs
More Total CVEs than 90% of tracked vendors
8.0
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 99% of tracked vendors
9.1
Avg CVSS Score
Higher Avg CVSS Score than 88% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Loftware over time

Volume of CVEsAvg CVSS Base Score
First CVE
Sep 10, 2024
22 months ago
Most Recent CVE
Sep 10, 2024
682 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (8 CVEs).

8 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2023-37227CRITICAL
Loftware Spectrum before 4.6 HF13 Deserializes Untrusted Data.
Sep 10, 20249.830NONO
CVE-2023-37234CRITICAL
Loftware Spectrum through 4.6 has unprotected JMX Registry.
Sep 10, 20249.828NONO
CVE-2023-37231CRITICAL
Loftware Spectrum before 4.6 HF14 uses a Hard-coded Password.
Sep 10, 20249.827NONO
CVE-2023-37226CRITICAL
Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function.
Sep 10, 20249.827NONO
CVE-2023-37230HIGH
Loftware Spectrum (testDeviceConnection) before 5.1 allows SSRF.
Sep 10, 20248.825NONO
CVE-2023-37229HIGH
Loftware Spectrum before 5.1 allows SSRF.
Sep 10, 20248.825NONO
CVE-2023-37233HIGH
Loftware Spectrum before 4.6 HF14 allows authenticated XXE attacks.
Sep 10, 20248.824NONO
CVE-2023-37232HIGH
Loftware Spectrum through 4.6 exposes Sensitive Information (Logs) to an Unauthorized Actor.
Sep 10, 20247.521NONO
View all 8 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products8 CVEs
50%
50%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
HighCritical
Attack Vector
Local0 (0.0%)
Network8 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low8 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None6 (75.0%)
Unknown0 (0.0%)
Required2 (25.0%)
Privileges Required
Low1 (12.5%)
High0 (0.0%)
None7 (87.5%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (8 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Loftware.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Loftware — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Loftware's Products

View all 1 CNAs →

Top CWEs