RCE in B. Braun Melsungen Ag Onlinesuite

CVE-2025-3322

An improper neutralization of inputs used in expression language allows remote code execution with the highest privileges on the server.

Vulnerability class: Log4Shell (CVE-2021-44228)

EPSS: 0.006 (44.0th percentile) — read the EPSS interpretation.