Browse CVEs

MEDIUM 6.5 CVE-2023-42248 An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can write arbitrary files by manipulating P… Visual Access Manager 4.42.2+ Fix from $1,6002025-01-13 MEDIUM 6.1 CVE-2023-42246 Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via /vam/vam_ep.php. Visual Access Manager 4.42.2+ Fix from $1,6002025-01-13 MEDIUM 6.1 CVE-2023-42247 Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via monitor/s_monitor_map.php. Visual Access Manager 4.42.2+ Fix from $1,6002025-01-13 MEDIUM 6.1 CVE-2023-42249 Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via vam/vam_visits.php. Visual Access Manager 4.42.2+ Fix from $1,6002025-01-13 MEDIUM 6.1 CVE-2023-42250 Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via /common/autocomplete.php. Visual Access Manager 4.42.2+ Fix from $1,6002025-01-13 HIGH 8.8 CVE-2023-42244 An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST … Visual Access Manager 4.42.2+ Fix from $1,9502025-01-13 MEDIUM 6.1 CVE-2023-42245 Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via monitor/s_scheduledfile.php. Visual Access Manager 4.42.2+ Fix from $1,6002025-01-13 MEDIUM 5.4 CVE-2023-42243 In Selesta Visual Access Manager < 4.42.2, an authenticated user can access the administrative page /common/vam_Sql.php, which allows for arbitrary S… Visual Access Manager 4.42.2+ Fix from $1,6002025-01-13 MEDIUM 6.5 CVE-2023-50811 An issue discovered in SELESTA Visual Access Manager 4.38.6 allows attackers to modify the “computer” POST parameter related to the ID of a specific … Visual Access Manager Mitigation only Fix from $1,6002024-03-19 CRITICAL 9.8 CVE-2019-19994 An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. It allows blind Command Injection. An attacker without authentica… Visual Access Manager after 4.29.0 Fix from $2,3002020-02-26 HIGH 8.8 CVE-2019-19988 An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. A user with valid credentials is able to create and write XML fil… Visual Access Manager after 4.29.0 Fix from $1,9502020-02-26 HIGH 7.5 CVE-2019-19986 An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. An attacker without authentication is able to execute arbitrary S… Visual Access Manager after 4.29.0 Fix from $1,9502020-02-26 HIGH 7.5 CVE-2019-19989 An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Several PHP pages, and other type of files, are reachable by any … Visual Access Manager after 4.29.0 Fix from $1,9502020-02-26 MEDIUM 6.5 CVE-2019-19987 An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. It allows Cross-Site Request Forgery (CSRF) on any HTML form. An … Visual Access Manager after 4.29.0 Fix from $1,6002020-02-26 MEDIUM 6.5 CVE-2019-19992 An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. A user with valid credentials is able to read XML files on the fi… Visual Access Manager after 4.29.0 Fix from $1,6002020-02-26 MEDIUM 5.4 CVE-2019-19990 An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Multiple Stored Cross-site scripting (XSS) vulnerabilities allow … Visual Access Manager after 4.29.0 Fix from $1,6002020-02-26 MEDIUM 5.4 CVE-2019-19991 An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Multiple Reflected Cross-site scripting (XSS) vulnerabilities all… Visual Access Manager after 4.29.0 Fix from $1,6002020-02-26 MEDIUM 5.3 CVE-2019-19993 An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Several full path disclosure vulnerability were discovered. A use… Visual Access Manager after 4.29.0 Fix from $1,6002020-02-26