Common vulnerabilities and Exposures (CVE)

Skip to main content

Required CVE Record Information

Description

A reflected cross-site scripting (XSS) vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows remote attackers to inject arbitrary web script or HTML into various locations.

CVSS 1 Total

Learn more
ScoreSeverityVersionVector String
7.6HIGH3.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L

Product Status

Learn more

Versions 2 Total

Default Status: unknown

affected

  • affected through U61 
  • affected through L81 

Versions 2 Total

Default Status: unknown

affected

  • affected through U61 
  • affected through L81 

Versions 2 Total

Default Status: unknown

affected

  • affected at A10 
  • affected at A11 

Credits

  • Julian Suleder, Nils Emmerich, and Birk Kauer of ERNW Research GmbH; Dr. Oliver Matula of ERNW Enno Rey Netzwerke GmbH, reported these vulnerabilities to the Federal Office for Information Security (BSI), Germany, in the context of the BSI project ManiMed (Manipulation of medical devices).

Updated:

This container includes required additional information provided by the CVE Program for this vulnerability.