CVE-2025-22373: Sicommnet Basec

High severity, CVSS 8.7. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SicommNet BASEC on SaaS allows Reflected XSS, XSS Through HTTP Query Strings, Rendering of Arbitrary HTML and alternation of CSS Styles This issue affects BASEC: from 14 Dec 2021.

Affected products

• Sicommnet Basec: from 14 Dec 2021

Published 2025-04-14. Last modified 2026-06-17.