Security Advisory

CVE-2025-22373

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-04-14 15:32:49
Last updated 2025-04-15 10:38:54
Assigner DIVD
State PUBLISHED

Description

Improper Neutralization of Input During Web Page Generation (XSS or Cross-site Scripting) vulnerability in SicommNet BASEC on SaaS allows Reflected XSS, XSS Through HTTP Query Strings, Rendering of Arbitrary HTML and alternation of CSS Styles This issue affects BASEC: from 14 Dec 2021.