Fresenius-Kabi Link+ Agilia
Approved changes feed: RSS · Atom
cpe:2.3:h:fresenius-kabi:link\+_agilia:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Fresenius Kabi (d62d9629-2181-5d09-b821-51fa01442b94) |
|---|---|
| Product | Link+ Agilia (1ef0faf9-b154-569f-ad80-1ead5101f9e3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-44464 |
not_vulnerable | 2026-06-08 05:36:45.811028 |
Fresenius Kabi Agilia Connect Infusion System hard coded credentials
MEDIUM (6.3)
Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 contains service credentials likely to be common across all instances. An attacker in possession of the password may gain privileges on all installations of this software.
Published: 2022-01-21T18:17:42.000Z
Updated: 2025-04-16T16:47:01.630Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43355 |
not_vulnerable | 2026-06-08 05:36:43.299857 |
Fresenius Kabi Agilia Connect Infusion System use of client side authentication
HIGH (7.3)
Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 allows user input to be validated on the client side without authentication by the server. The server should not rely on the correctness of the data because users might not support or block JavaScript or intentionally bypass the client-side checks. An attacker with knowledge of the service user could circumvent the client-side control and login with service privileges.
Published: 2022-01-21T18:17:44.000Z
Updated: 2025-04-16T16:46:31.988Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41835 |
not_vulnerable | 2026-06-08 05:35:21.144127 |
Fresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm
HIGH (7.3)
Fresenius Kabi Agilia Link + version 3.0 does not enforce transport layer encryption. Therefore, transmitted data may be sent in cleartext. Transport layer encryption is offered on Port TCP/443, but the affected service does not perform an automated redirect from the unencrypted service on Port TCP/80 to the encrypted service.
Published: 2022-01-21T18:17:44.000Z
Updated: 2025-04-16T16:46:42.361Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33848 |
not_vulnerable | 2026-06-08 05:32:12.580905 |
Fresenius Kabi Agilia Connect Infusion System cross site scripting
MEDIUM (5.4)
Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 is vulnerable to reflected cross-site scripting attacks. An attacker could inject JavaScript in a GET parameter of HTTP requests and perform unauthorized actions such as stealing internal information and performing actions in context of an authenticated user.
Published: 2022-01-21T18:17:43.000Z
Updated: 2025-04-16T16:46:52.196Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-33846 |
not_vulnerable | 2026-06-08 05:32:12.555957 |
Fresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithm
MEDIUM (5.9)
Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 issues authentication tokens to authenticated users that are signed with a symmetric encryption key. An attacker in possession of the key can issue valid JWTs and impersonate arbitrary users.
Published: 2022-01-21T18:17:37.000Z
Updated: 2025-04-16T18:01:40.236Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23236 |
not_vulnerable | 2026-06-08 05:30:02.542947 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23233 |
not_vulnerable | 2026-06-08 05:30:02.541963 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23207 |
not_vulnerable | 2026-06-08 05:30:02.440418 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23196 |
not_vulnerable | 2026-06-08 05:30:02.404867 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23195 |
not_vulnerable | 2026-06-08 05:30:02.402508 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.