VULNERABILITY INTELLIGENCE
CVE-2025-22373
EPSS probability0.47%
CISA KEVNot currently listed
Published2025-04-14
Last modified2026-06-17
Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SicommNet BASEC on SaaS allows Reflected XSS, XSS Through HTTP Query Strings, Rendering of Arbitrary HTML and alternation of CSS Styles This issue affects BASEC: from 14 Dec 2021.
Weakness classification
- csirt@divd.nl: CWE-79