EUVD-2020-17861

Malware in sbrugna...

EUVD-2020-17865

Malware in sbrugna...

EUVD-2020-17863

Malware in sbrugna...

B. Braun onlinesuite 安全漏洞

B. Braun onlinesuite is a digital management platform for healthcare applications from B. Braun, Germany. A security vulnerability exists in B. Braun onlinesuite that stems from improper neutralization of expression language input and could lead to remote code execution...

CVE-2020-25172

A relative path traversal attack in the B. Braun OnlineSuite Version AP 3.0 and earlier allows unauthenticated attackers to upload or download arbitrary files...

CVE-2020-25174

A DLL hijacking vulnerability in the B. Braun OnlineSuite Version AP 3.0 and earlier allows local attackers to execute code on the system as a high privileged user...

CVE-2020-25172

A relative path traversal attack in the B. Braun OnlineSuite Version AP 3.0 and earlier allows unauthenticated attackers to upload or download arbitrary files...

Design/Logic Flaw

An Excel Macro Injection vulnerability exists in the export feature in the B. Braun OnlineSuite Version AP 3.0 and earlier via multiple input fields that are mishandled in an Excel export...

Path traversal

A relative path traversal attack in the B. Braun OnlineSuite Version AP 3.0 and earlier allows unauthenticated attackers to upload or download arbitrary files...

CVE-2020-25172

CVE-2020-25172 refers to a relative path traversal vulnerability in the B. Braun OnlineSuite, affecting AP 3.0 and earlier. The issue allows unauthenticated attackers to upload or download arbitrary files via the vulnerable component/file handling. The CVSS base scores (v3.1: 9.8 CRITICAL; v2.0: ...

CVE-2020-25172 B. Braun OnlineSuite

A relative path traversal attack in the B. Braun OnlineSuite Version AP 3.0 and earlier allows unauthenticated attackers to upload or download arbitrary files...

CVE-2020-25174 B. Braun OnlineSuite

A DLL hijacking vulnerability in the B. Braun OnlineSuite Version AP 3.0 and earlier allows local attackers to execute code on the system as a high privileged user...

CVE-2020-25174

The CVE-2020-25174 entry covers a DLL hijacking vulnerability in B. Braun OnlineSuite AP versions 3.0 and earlier. The root cause is an uncontrolled search path element that allows a local attacker to execute code with high privileges on the target system. Affected product: OnlineSuite AP 3.0 and...

CVE-2020-25170

The CVE-2020-25170 entry concerns B. Braun OnlineSuite (AP 3.0 and earlier). The issue is an Excel Macro Injection vulnerability in the export feature caused by mishandling in the Excel export of multiple input fields. The affected component is the export path within OnlineSuite, with root cause ...

CVE-2020-25170 B. Braun OnlineSuite

An Excel Macro Injection vulnerability exists in the export feature in the B. Braun OnlineSuite Version AP 3.0 and earlier via multiple input fields that are mishandled in an Excel export...

PT-2020-15995

Name of the Vulnerable Software and Affected Versions B. Braun OnlineSuite versions prior to AP 3.0 Description A relative path traversal attack allows unauthenticated attackers to upload or download arbitrary files. Recommendations For versions prior to AP 3.0, update to a version that fixes thi...

PT-2020-15996

Name of the Vulnerable Software and Affected Versions B. Braun OnlineSuite versions prior to AP 3.0 Description A DLL hijacking issue allows local attackers to execute code on the system as a high privileged user. This enables them to potentially gain elevated access and perform unauthorized...

PT-2020-15993

Name of the Vulnerable Software and Affected Versions B. Braun OnlineSuite versions prior to AP 3.0 Description An Excel Macro Injection issue exists in the export feature due to mishandled input fields in the Excel export. Recommendations For versions prior to AP 3.0, consider disabling the expo...

CVE-2020-25174: Uncontrolled Search Path Element

A DLL hijacking vulnerability in the B. Braun OnlineSuite Version AP 3.0 and earlier allows local attackers to execute code on the system as a high privileged user...

CVE-2020-25170: Improper Neutralization of Formula Elements in a CSV File

An Excel Macro Injection vulnerability exists in the export feature in the B. Braun OnlineSuite Version AP 3.0 and earlier via multiple input fields that are mishandled in an Excel export...