BASEC vulnerabilities

3 known vulnerabilities in BASEC from SicommNet. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  BASEC: Improper Neutralization of Input During Web Page Generation

  CVE-2025-22373Apr 14, 2025SicommNet

  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SicommNet BASEC on SaaS allows Reflected XSS, XSS Through HTTP Query Strings, Rendering of Arbitrary HTML and alternation of CSS Styles This issue affe

• 9.3 Critical severity

  BASEC: Insufficiently Protected Credentials

  CVE-2025-22372Apr 14, 2025SicommNet

  Insufficiently Protected Credentials vulnerability in SicommNet BASEC on SaaS allows Password Recovery. Passwords are either stored in plain text using reversible encryption, allowing an attacker with sufficient privileges to extract plain text passwords easil

• 9.3 Critical severity

  BASEC: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-22371Apr 14, 2025SicommNet

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SicommNet BASEC (SaaS Service) login page allows an unauthenticated remote attacker to Bypass Authentication and execute arbitrary SQL commands.This issue at