CVE-2020-25165

CVE-2020-25165 affects BD Alaris PC Unit Model 8015 and BD Alaris Systems Manager (versions 4.33 and earlier). The issue is a network session authentication vulnerability in the authentication process between these components that could be exploited to perform a denial-of-service by modifying dat...

CVE-2023-30564

CVE-2023-30564 affects BD Alaris Systems Manager; the root cause is lack of input validation during the Device Import Function. The vulnerability could impact confidentiality (high), with other impacts lower (integrity/docs). CVSS v3.1 base score 6.9 (AV: Adjacent, AC: Low, PR: Low, UI: Required,...

CVE-2023-30563

BD Alaris Systems Manager (SM) versions 12.3 and prior are affected by CVE-2023-30563, an improper input validation vulnerability that allows a malicious file uploaded via the System Manager User Import Function to trigger a Cross-Site Scripting (XSS) condition and hijack a user session. The CVSS...