Approved changes feed: RSS · Atom

cpe:2.3:a:b._braun_melsungen_ag:onlinesuite:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorB. Braun Melsungen Ag (ea57f712-b1f9-5b6f-9811-4da4a26295d9)
ProductOnlinesuite (e4a5a7b4-18c3-5e3b-ab54-78e0624699cb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-3365 vulnerable 2026-06-08 07:23:08.742238 Relative Path Traversal in OnlineSuite
CRITICAL (9.8)
A missing protection against path traversal allows to access any file on the server.
Published: 2025-06-06T08:14:00.444Z
Updated: 2025-06-06T17:12:51.401Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3322 vulnerable 2026-06-08 07:23:08.662068 Improper Neutralization of Special Elements in OnlineSuite
An improper neutralization of inputs used in expression language allows remote code execution with the highest privileges on the server.
Published: 2025-06-06T08:13:12.028Z
Updated: 2025-06-06T17:29:30.972Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3321 vulnerable 2026-06-08 07:23:08.661678 Use of Hard-coded Credentials in OnlineSuite
A predefined administrative account is not documented and cannot be deactivated. This account cannot be misused from the network, only by local users on the server.
Published: 2025-06-06T08:12:46.971Z
Updated: 2025-06-06T18:25:54.094Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25174 vulnerable 2026-06-08 05:22:36.109763 B. Braun OnlineSuite
A DLL hijacking vulnerability in the B. Braun OnlineSuite Version AP 3.0 and earlier allows local attackers to execute code on the system as a high privileged user.
Published: 2020-11-06T16:08:41.727Z
Updated: 2024-09-17T00:16:15.836Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25172 vulnerable 2026-06-08 05:22:36.107612 B. Braun OnlineSuite
A relative path traversal attack in the B. Braun OnlineSuite Version AP 3.0 and earlier allows unauthenticated attackers to upload or download arbitrary files.
Published: 2020-11-06T16:09:16.397Z
Updated: 2024-09-16T18:39:05.515Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25170 vulnerable 2026-06-08 05:22:36.104367 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.