CVE-2025-22373 Information

Description

Improper Neutralization of Input During Web Page Generation (XSS or ‘Cross-site Scripting’) vulnerability in SicommNet BASEC on SaaS allows Reflected XSS XSS Through HTTP Query Strings Rendering of Arbitrary HTML and alternation of CSS Styles This issue affects BASEC: from 14 Dec 2021.

Reference

https://basec.sicomm.net/login/ https://cisrt.divd.nl/CVE-2025-22373 https://csirt.divd.nl/DIVD-2025-00001