CVE-2025-3365 | Critical | 9.8 | 2025-06-06 | A missing protection against path traversal allows to access
any file on the server. |
CVE-2025-3322 | | | 2025-06-06 | An improper neutralization of inputs used in expression
language allows remote code execution with the highest privileges on the
server. |
CVE-2025-3321 | | | 2025-06-06 | A predefined administrative account is not documented and cannot
be deactivated. This account cannot be misused from the network, only by local
users on the se… |
CVE-2020-25168 | Low | 3.3 | 2022-04-14 | Hard-coded credentials in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 enable attackers… |
CVE-2020-25166 | High | 7.6 | 2022-04-14 | An improper verification of the cryptographic signature of firmware updates of the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data mod… |
CVE-2020-25164 | Medium | 6.5 | 2022-04-14 | A vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows attackers to rec… |
CVE-2020-25162 | High | 7.5 | 2022-04-14 | A XPath injection vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows… |
CVE-2020-25160 | Medium | 6.8 | 2022-04-14 | Improper access controls in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 enables attack… |
CVE-2020-25158 | High | 7.6 | 2022-04-14 | A reflected cross-site scripting (XSS) vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Version… |
CVE-2020-25156 | High | 7.2 | 2022-04-14 | Active debug code in the B. Braun Melsungen AG SpaceCom Version L8/U61, and the Data module compactplus Versions A10 and A11 and earlier enables attackers in p… |
CVE-2020-25154 | Medium | 5.4 | 2022-04-14 | An open redirect vulnerability in the administrative interface of the B. Braun Melsungen AG SpaceCom device Version L81/U61 and earlier, and the Data module co… |
CVE-2020-25152 | Medium | 6.5 | 2022-04-14 | A session fixation vulnerability in the B. Braun Melsungen AG SpaceCom administrative interface Version L81/U61 and earlier, and the Data module compactplus Ve… |
CVE-2020-25150 | High | 7.6 | 2022-04-14 | A relative path traversal attack in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows… |
CVE-2020-16238 | Medium | 6.7 | 2022-04-14 | A vulnerability in the configuration import mechanism of the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versio… |
CVE-2020-25174 | High | 7.8 | 2020-11-06 | A DLL hijacking vulnerability in the B. Braun OnlineSuite Version AP 3.0 and earlier allows local attackers to execute code on the system as a high privileged… |
CVE-2020-25172 | Critical | 9.8 | 2020-11-06 | A relative path traversal attack in the B. Braun OnlineSuite Version AP 3.0 and earlier allows unauthenticated attackers to upload or download arbitrary files. |
CVE-2020-25170 | High | 7.8 | 2020-11-06 | An Excel Macro Injection vulnerability exists in the export feature in the B. Braun OnlineSuite Version AP 3.0 and earlier via multiple input fields that are m… |