Approved changes feed: RSS · Atom
cpe:2.3:a:sicommnet:basec:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Sicommnet (8cbf6c12-f5b2-5f5f-86d5-1e7fe859dfd2) |
|---|---|
| Product | Basec (e82af90c-92b7-5f22-b861-8bc7e6abec06) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-22373 |
vulnerable | 2026-06-08 07:10:52.945658 |
XSS, HTML and Style injection on login page
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SicommNet BASEC on SaaS allows Reflected XSS, XSS Through HTTP Query Strings, Rendering of Arbitrary HTML and alternation of CSS Styles
This issue affects BASEC: from 14 Dec 2021.
Published: 2025-04-14T15:32:49.533Z
Updated: 2025-04-15T10:38:54.463Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-22372 |
vulnerable | 2026-06-08 07:10:52.945283 |
Insecure password storage in SicommNet BASEC
Insufficiently Protected Credentials vulnerability in SicommNet BASEC on SaaS allows Password Recovery.
Passwords are either stored in plain text using reversible encryption, allowing an attacker with sufficient privileges to extract plain text passwords easily.
This issue affects BASEC: from 14 Dec 2021.
Published: 2025-04-14T15:32:49.367Z
Updated: 2025-04-15T10:38:53.145Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-22371 |
vulnerable | 2026-06-08 07:10:52.944685 |
SQL-injection in admin_login_handler allows unauthenticated user to log in as an administrator in SicommNet BASEC
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SicommNet BASEC (SaaS Service) login page allows an unauthenticated remote attacker to Bypass Authentication and execute arbitrary SQL commands.This issue at least affects BASEC for the date of 14 Dec 2021 onwards. It is very likely that this vulnerability has been present in the solution before that.
The issue was fixed by SicommNet around 11pm on 16 april 2025 (Eastern Time)
Published: 2025-04-14T15:32:49.665Z
Updated: 2025-04-21T11:43:09.671Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.