Read the docs

SicommNet

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

SicommNet records in CISA KEV

No SicommNet vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-16275 CVE-2025-22371 · GHSA-46h9-fw88-xg28

SQL-injection in admin_login_handler allows unauthenticated user to log in as an administrator in SicommNet BASEC

Priority MEDIUM 43

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SicommNet BASEC (SaaS Service) login page allows an unauthenticated remote attacker to Bypass Authentication and execu…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00613 Published 2025-04-14 Fixed in 16 April 2025 23:00 EST CWE-89
TI-2025-16276 CVE-2025-22372 · GHSA-p8mv-f94r-2px4

Insecure password storage in SicommNet BASEC

Priority LOW 39

Insufficiently Protected Credentials vulnerability in SicommNet BASEC on SaaS allows Password Recovery.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00222 Published 2025-04-14 No fix listed CWE-522
TI-2025-16277 CVE-2025-22373 · GHSA-ggp5-cmc4-x9q4

XSS, HTML and Style injection on login page

Priority LOW 38

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SicommNet BASEC on SaaS allows Reflected XSS, XSS Through HTTP Query Strings, Rendering of Arbitrary HTML and a…

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00483 Published 2025-04-14 No fix listed CWE-79
Open these records in search →