← Back

Spectra

spectra

Vendor: Allaire • 5 CVEs

CVEs (5)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Allaire
1Spectra
Apr 16, 2026
Nov 14, 2000
N/A· v4
N/A· v3
6.4 MEDIUM· v2
Vulnerability in an administrative interface utility for Allaire Spectra 1.0.1 allows remote attackers to read and modify sensitive configuration information.
1Allaire
1Spectra
Apr 16, 2026
Apr 24, 2000
N/A· v4
N/A· v3
2.1 LOW· v2
The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorized activities via an object-method that is added to the container object with a p...Show more
The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorized activities via an object-method that is added to the container object with a publishing rule.Show less
1Allaire
1Spectra
Apr 16, 2026
Jan 4, 2000
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The Allaire Spectra Configuration Wizard allows remote attackers to cause a denial of service by repeatedly resubmitting data collections for indexing via a URL.
1Allaire
1Spectra
Apr 16, 2026
Jan 4, 2000
N/A· v4
N/A· v3
4.6 MEDIUM· v2
The Allaire Spectra Webtop allows authenticated users to access other Webtop sections by specifying explicit URLs.
1Allaire
1Spectra
Apr 16, 2026
Jan 1, 2000
N/A· v4
N/A· v3
7.5 HIGH· v2
The Remote Access Service invoke.cfm template in Allaire Spectra 1.0 allows users to bypass authentication via the bAuthenticated parameter.