Skip to content
OpenAdvisories

Product · SicommNet

BASEC

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-22371

    SQL-injection in admin_login_handler allows unauthenticated user to log in as an administrator in SicommNet BASEC

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SicommNet BASEC (SaaS Service) login page allows an unauthenticated remote attacker to Bypass Authentication and execute arbitrary SQL commands.This issue at…

    SicommNet BASEC
  • Critical 9.3
    CVE-2025-22372

    Insecure password storage in SicommNet BASEC

    Insufficiently Protected Credentials vulnerability in SicommNet BASEC on SaaS allows Password Recovery. Passwords are either stored in plain text using reversible encryption, allowing an attacker with sufficient privileges to extract plain text passwords easi…

    SicommNet BASEC