CVE-2020-25162: Bbraun Datamodule Compactplus

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

A XPath injection vulnerability in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier, and the Data module compactplus Versions A10 and A11 allows unauthenticated remote attackers to access sensitive information and escalate privileges.

Affected products

• Bbraun Datamodule Compactplus: version a10 only; version a11 only
• Bbraun Spacecom: up to and including l81

Published 2022-04-14. Last modified 2026-06-17.