PT-2022-8702
CVE-2020-25158
·
Published
2022-04-14
·
Updated
2022-04-21
Description by
CVSS 3.1
7.6
HighMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
Name of the Vulnerable Software and Affected Versions
B. Braun Melsungen AG SpaceCom versions L81/U61 and earlier
B. Braun Melsungen AG Data module compactplus versions A10 and A11
Description
A reflected cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML into various locations.
Recommendations
For B. Braun Melsungen AG SpaceCom versions L81/U61 and earlier, update to a version later than L81/U61 to resolve the issue.
For B. Braun Melsungen AG Data module compactplus versions A10 and A11, update to a version later than A11 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾