CVE-2009-4837: Secureideas Basic Analysis And Security Engine

Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Basic Analysis and Security Engine (BASE) before 1.4.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) sig[1] parameter to base/base_qry_main.php, or the time[0][1] parameter to (2) base/base_stat_alerts.php or (3) base/base_stat_uaddr.php. NOTE: some of these details are obtained from third party information.

Affected products

• Secureideas Basic Analysis And Security Engine: up to and including 1.4.3; version 1.1 only; version 1.1.2 only; version 1.1.3 only; version 1.1.4 only; version 1.2 only; …

Published 2010-05-06. Last modified 2026-06-16.