EUVD-2020-17863

Malware in sbrugna...

EUVD-2020-17861

Malware in sbrugna...

EUVD-2020-17865

Malware in sbrugna...

CVE-2025-3365

CVE-2025-3365 is a relative path traversal flaw described as a lack of path traversal protection exposing arbitrary files on the server. The primary explicit listing ties this to B. Braun onlinesuite (CVE-2025-3365) with public references noting a missing protection allowing file access. Related ...

CVE-2025-3365 Relative Path Traversal in OnlineSuite

A missing protection against path traversal allows to access any file on the server...

CVE-2025-3365 Relative Path Traversal in OnlineSuite

A missing protection against path traversal allows to access any file on the server...

CVE-2025-3322 Improper Neutralization of Special Elements in OnlineSuite

An improper neutralization of inputs used in expression language allows remote code execution with the highest privileges on the server...

CVE-2025-3322 Improper Neutralization of Special Elements in OnlineSuite

An improper neutralization of inputs used in expression language allows remote code execution with the highest privileges on the server...

CVE-2025-3321 Use of Hard-coded Credentials in OnlineSuite

A predefined administrative account is not documented and cannot be deactivated. This account cannot be misused from the network, only by local users on the server...

CVE-2025-3321

CVE-2025-3321 affects B.Braun OnlineSuite. The issue is a predefined administrative account that is undocumented and cannot be deactivated, exploitable only by local users on the server (not over the network). Impact is high across confidentiality, integrity, and availability according to the CVS...

CVE-2025-3321 Use of Hard-coded Credentials in OnlineSuite

A predefined administrative account is not documented and cannot be deactivated. This account cannot be misused from the network, only by local users on the server...

PT-2025-24052 · B. Braun · B. Braun Onlinesuite

Name of the Vulnerable Software and Affected Versions: B.Braun OnlineSuite versions prior to AP 3.0 Description: A predefined administrative account is not documented and cannot be deactivated. This account cannot be misused from the network, only by local users on the server. The issue affects t...

B. Braun onlinesuite 安全漏洞

B. Braun onlinesuite is a digital management platform for healthcare applications from B. Braun, Germany. A security vulnerability exists in B. Braun onlinesuite that stems from an undocumented and non-deactivatable predefined administrative account, which could lead to abuse by local users...

B. Braun onlinesuite 安全漏洞

B. Braun onlinesuite is a digital management platform for healthcare applications from B. Braun, Germany. A security vulnerability exists in B. Braun onlinesuite that stems from improper neutralization of expression language input and could lead to remote code execution...

CVE-2020-25172

A relative path traversal attack in the B. Braun OnlineSuite Version AP 3.0 and earlier allows unauthenticated attackers to upload or download arbitrary files...

CVE-2020-25172

A relative path traversal attack in the B. Braun OnlineSuite Version AP 3.0 and earlier allows unauthenticated attackers to upload or download arbitrary files...

CVE-2020-25174

A DLL hijacking vulnerability in the B. Braun OnlineSuite Version AP 3.0 and earlier allows local attackers to execute code on the system as a high privileged user...

CVE-2020-25170

An Excel Macro Injection vulnerability exists in the export feature in the B. Braun OnlineSuite Version AP 3.0 and earlier via multiple input fields that are mishandled in an Excel export...

CVE-2020-25170

An Excel Macro Injection vulnerability exists in the export feature in the B. Braun OnlineSuite Version AP 3.0 and earlier via multiple input fields that are mishandled in an Excel export...

Spoofing

A DLL hijacking vulnerability in the B. Braun OnlineSuite Version AP 3.0 and earlier allows local attackers to execute code on the system as a high privileged user...