Vulnerabilities

TI-2025-11480 CVE-2025-12509 · GHSA-r4f3-5wj3-vm92

Scripts for the module Global_Shipping executable on BRAIN2 Server

LOW 38

On a client with an admin user, a Global_Shipping script can be implemented.

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.00292 Published 2025-10-31 Fixed in 3.07 CWE-829

TI-2025-11479 CVE-2025-12508 · GHSA-538j-4932-wc23

LOW 38

When using domain users as BRAIN2 users, communication with Active Directory services is unencrypted.

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.00201 Published 2025-10-31 Fixed in 3.07 CWE-319

TI-2025-11478 CVE-2025-12507 · GHSA-9cjm-jvqx-xq8q

LOW 39

The service Bizerba Communication Server (BCS) has an unquoted service path.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.0014 Published 2025-10-31 Fixed in 5.02 CWE-428