CVE-2020-25170

The CVE-2020-25170 entry concerns B. Braun OnlineSuite (AP 3.0 and earlier). The issue is an Excel Macro Injection vulnerability in the export feature caused by mishandling in the Excel export of multiple input fields. The affected component is the export path within OnlineSuite, with root cause ...

CVE-2020-25172

CVE-2020-25172 refers to a relative path traversal vulnerability in the B. Braun OnlineSuite, affecting AP 3.0 and earlier. The issue allows unauthenticated attackers to upload or download arbitrary files via the vulnerable component/file handling. The CVSS base scores (v3.1: 9.8 CRITICAL; v2.0: ...

CVE-2020-25174

The CVE-2020-25174 entry covers a DLL hijacking vulnerability in B. Braun OnlineSuite AP versions 3.0 and earlier. The root cause is an uncontrolled search path element that allows a local attacker to execute code with high privileges on the target system. Affected product: OnlineSuite AP 3.0 and...