Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: SicommNet Clear all filters
TI-2025-16275 CVE-2025-22371 · GHSA-46h9-fw88-xg28

SQL-injection in admin_login_handler allows unauthenticated user to log in as an administrator in SicommNet BASEC

Priority MEDIUM 43

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SicommNet BASEC (SaaS Service) login page allows an unauthenticated remote attacker to Bypass Authentication and execu…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00613 Published 2025-04-14 Fixed in 16 April 2025 23:00 EST CWE-89
TI-2025-16277 CVE-2025-22373 · GHSA-ggp5-cmc4-x9q4

XSS, HTML and Style injection on login page

Priority LOW 38

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SicommNet BASEC on SaaS allows Reflected XSS, XSS Through HTTP Query Strings, Rendering of Arbitrary HTML and a…

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00483 Published 2025-04-14 No fix listed CWE-79
TI-2025-16276 CVE-2025-22372 · GHSA-p8mv-f94r-2px4

Insecure password storage in SicommNet BASEC

Priority LOW 39

Insufficiently Protected Credentials vulnerability in SicommNet BASEC on SaaS allows Password Recovery.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00222 Published 2025-04-14 No fix listed CWE-522