Records24All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high13CVSS 7.0–8.9
Exploited now
B. Braun Melsungen AG records in CISA KEVNo B. Braun Melsungen AG vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 43
A XPath injection vulnerability in the B.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01879 · Published 2022-04-14 · No fix listed CWE-643
Priority MEDIUM 41
A relative path traversal attack in the B.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01529 · Published 2022-04-14 · No fix listed CWE-23
Priority LOW 38
A session fixation vulnerability in the B.
CVSS 3.1HIGH 8.1· Network · No auth · User interaction · EPSS 0.01281 · Published 2022-04-14 · No fix listed CWE-384
Priority LOW 36
Active debug code in the B.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01186 · Published 2022-04-14 · No fix listed CWE-489
Priority LOW 35
A reflected cross-site scripting (XSS) vulnerability in the B.
CVSS 3.1HIGH 7.6· Network · No auth · User interaction · EPSS 0.00848 · Published 2022-04-14 · No fix listed CWE-79
Priority LOW 34
An improper verification of the cryptographic signature of firmware updates of the B.
CVSS 3.1HIGH 7.6· Network · Low privileges · No interaction · EPSS 0.00473 · Published 2022-04-14 · No fix listed CWE-347
Priority LOW 34
A vulnerability in the B.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00624 · Published 2022-04-14 · No fix listed CWE-759
Priority LOW 31
A vulnerability in the configuration import mechanism of the B.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00249 · Published 2022-04-14 · No fix listed CWE-269
Priority LOW 29
Improper access controls in the B.
CVSS 3.1MEDIUM 6.8· Local · No auth · No interaction · EPSS 0.00208 · Published 2022-04-14 · No fix listed CWE-284
Priority LOW 28
An open redirect vulnerability in the administrative interface of the B.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00663 · Published 2022-04-14 · No fix listed CWE-601
Priority LOW 15
Hard-coded credentials in the B.
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00214 · Published 2022-04-14 · No fix listed CWE-798
Open these records in search →