SicommNet vulnerabilities
We track 3 vulnerabilities in SicommNet products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on April 14, 2025.
Latest SicommNet vulnerabilities
- 8.7 High severity
BASEC: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SicommNet BASEC on SaaS allows Reflected XSS, XSS Through HTTP Query Strings, Rendering of Arbitrary HTML and alternation of CSS Styles This issue affe
- 9.3 Critical severity
BASEC: Insufficiently Protected Credentials
Insufficiently Protected Credentials vulnerability in SicommNet BASEC on SaaS allows Password Recovery. Passwords are either stored in plain text using reversible encryption, allowing an attacker with sufficient privileges to extract plain text passwords easil
- 9.3 Critical severity
BASEC: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SicommNet BASEC (SaaS Service) login page allows an unauthenticated remote attacker to Bypass Authentication and execute arbitrary SQL commands.This issue at