B.Braun: CVE Program partner

CVEs, 365 days04 all time, 0 rejected

Quality-median 99%

CVSS by the CNA-share of records

CWE-share of records

Affected versions-not n/a or unspecified

CVSS added by CISA-lower is better

Organisation	B. Braun SE
Role	CNA
Type	Vendor
Reports to	icscert → CISA
Scope	B. Braun’s commercially available products only.
Advisories	https://www.bbraun.com/en/products-and-solutions/b--braun-product-security.html

CVE-2025-3365 2025-06-06 · CVSS 9.8
A missing protection against path traversal allows to access any file on the server.
CVE-2025-3322 2025-06-06 · CVSS 10.0
An improper neutralization of inputs used in expression language allows remote code execution with the highest privileges on the server.
CVE-2025-3321 2025-06-06 · CVSS 9.4
A predefined administrative account is not documented and cannot be deactivated. This account cannot be misused from the network, only by local users on the ser
CVE-2023-0888 2023-03-13 · CVSS 4.9
An improper neutralization of directives in dynamically evaluated code vulnerability in the WiFi Battery embedded web server in versions L90/U70 and L92/U92 can

B.Braun