CVE-2020-25170

7.8 highEPSS 1.0%

High (7.8) in bbraun onlinesuite application package. EPSS 1.0% chance of exploitation in the next 30 days.

An Excel Macro Injection vulnerability exists in the export feature in the B. Braun OnlineSuite Version AP 3.0 and earlier via multiple input fields that are mishandled in an Excel export.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE: CWE-1236
Published: 2020-11-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

bbraun:onlinesuite_application_package

References

https://us-cert.cisa.gov/ics/advisories/icsma-20-296-01
https://us-cert.cisa.gov/ics/advisories/icsma-20-296-01

Check your stack JSON