What’s Vulnerable › Products

HotelRunner B2B vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your HotelRunner B2B version is affected

Latest HotelRunner B2B vulnerabilities

• CVE-2025-4296 — Open Redirect in HotelRunner's B2B (CVSS 4.7)
• CVE-2025-4295 — Host Header Injection in HotelRunner's B2B (CVSS 4.6)
• CVE-2025-4294 — XSS in HotelRunner's B2B (CVSS 4.8)