CVE-2025-3322 - CVE House
Back to Database
Status published Critical CVE-2025-3322

Improper Neutralization of Special Elements in OnlineSuite

Vulnerability Description

An improper neutralization of inputs used in expression language allows remote code execution with the highest privileges on the server.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-3322

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Fabian Weber (CODE WHITE GmbH)
  • Dr. Florian Hauser (CODE WHITE GmbH)

References

More from B. Braun Melsungen AG

View All →
CVE-2025-3365
Relative Path Traversal in OnlineSuite
Critical 9.8
CVE-2025-3321
Use of Hard-coded Credentials in OnlineSuite
Critical 9.4
CVE-2020-25174
B. Braun OnlineSuite
High 7.8
CVE-2020-25172
B. Braun OnlineSuite
Critical 9.8
CVE-2020-25170
B. Braun OnlineSuite
High 7.8

Affected Vendor

B. Braun Melsungen AG

View all reports →

Affected Software

OnlineSuite
Vulnerable Versions:
3.0

Timeline

Official Publish: June 6th, 2025
Last Modified: June 6th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-917

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.