BASIS International Ltd.

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

BASIS International Ltd. records in CISA KEV

No BASIS International Ltd. vulnerabilities are listed in CISA KEV.

1 record

TI-2025-24453 CVE-2025-34320 · GHSA-gfrw-rq64-cvg9

MEDIUM 50

BASIS BBj versions prior to 25.00 contain a Jetty-served web endpoint that fails to properly validate or canonicalize input path segments.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00864 Published 2025-11-20 Fixed in 25.00 CWE-22