B. Braun Melsungen Ag Onlinesuite
6 CVEs affecting B. Braun Melsungen Ag Onlinesuite. Latest disclosed: 2025-06-06. Critical: 2, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-3365 | Critical | 9.8 | 2025-06-06 | A missing protection against path traversal allows to access any file on the server. |
CVE-2020-25172 | Critical | 9.8 | 2020-11-06 | A relative path traversal attack in the B. Braun OnlineSuite Version AP 3.0 and earlier allows unauthenticated attackers to upload or download arbitrary files. |
CVE-2020-25174 | High | 7.8 | 2020-11-06 | A DLL hijacking vulnerability in the B. Braun OnlineSuite Version AP 3.0 and earlier allows local attackers to execute code on the system as a high privileged… |
CVE-2020-25170 | High | 7.8 | 2020-11-06 | An Excel Macro Injection vulnerability exists in the export feature in the B. Braun OnlineSuite Version AP 3.0 and earlier via multiple input fields that are m… |
CVE-2025-3322 | | 2025-06-06 | An improper neutralization of inputs used in expression language allows remote code execution with the highest privileges on the server. | |
CVE-2025-3321 | | 2025-06-06 | A predefined administrative account is not documented and cannot be deactivated. This account cannot be misused from the network, only by local users on the se… |