CVE-2012-1198: base_ag_main.php in Basic Analysis and Security Engine (BASE) 1.4.5 allows remote attackers to execute arbi...

Security readout for executives and security teams

CVE-2012-1198 is a remote code execution issue reported in Basic Analysis and Security Engine (BASE) 1.4.5. If an exposed BASE instance accepts malicious file content and later serves it as executable, an attacker could run code on the server. The source bundle does not name a fix version or confirm active exploitation. Exposure is most likely where BASE 1.4.5 is deployed on a web server and reachable by untrusted users. Internet-facing security monitoring consoles, legacy internal SOC tools, or forgotten BASE installations should be checked first. The bundle does not establish affected versions beyond 1.4.5. Prioritize this if BASE is still deployed, especially on an internet-facing or broadly reachable server. The business risk is server compromise through a legacy security tool. If BASE is not present, no action is required beyond documenting non-exposure. Mitigation focus: Identify and remove or isolate any BASE 1.4.5 deployments.; Check vendor or project guidance for a fixed release or patch.; Restrict BASE access to trusted administrators and networks only..

Prepared

Jun 27, 2026, 17:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.