by Kastro
Paper/Archive/CVE-2025-3322

CVE-2025-3322

B. Braun Melsungen AG OnlineSuite — Improper Neutralization of Special Elements in OnlineSuite

EPSS 0.6%CVSS 10.0
critical.is priorityof 100
40
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 51.0.510 × 2010.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An improper neutralization of inputs used in expression language allows remote code execution with the highest privileges on the server.

Affected

ProductAffectedFixed inSource
OnlineSuite3.0–CNA

Scores by source

B.Braun (CNA)10.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refbbraun.com/productsecurity