CVE-2020-25158CWE-79

B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus

High · published April 14, 2022

CVSS v3.1
7.6
EPSS
1%
Percentile
57.7
In the wild
Unconfirmed
What it is

A reflected cross-site scripting (XSS) vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows remote attackers to inject arbitrary web script or HTML into various locations.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00848 · 57.7th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2022-04-14T20:05Z
EPSS history
Timeline
  • 14 APR 20:05Z
    B. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplus
    cvelistv5