Vulnerability index

Browse CVEs

18 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Visual Access Manager MEDIUM 6.5
CVE-2023-42248

An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can write arbitrary files by manipulating P…

Fix: 4.42.2+
Fix from $1,600 2025-01-13
Visual Access Manager MEDIUM 6.1
CVE-2023-42246

Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via /vam/vam_ep.php.

Fix: 4.42.2+
Fix from $1,600 2025-01-13
Visual Access Manager MEDIUM 6.1
CVE-2023-42247

Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via monitor/s_monitor_map.php.

Fix: 4.42.2+
Fix from $1,600 2025-01-13
Visual Access Manager MEDIUM 6.1
CVE-2023-42249

Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via vam/vam_visits.php.

Fix: 4.42.2+
Fix from $1,600 2025-01-13
Visual Access Manager MEDIUM 6.1
CVE-2023-42250

Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via /common/autocomplete.php.

Fix: 4.42.2+
Fix from $1,600 2025-01-13
Visual Access Manager HIGH 8.8
CVE-2023-42244

An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST …

Fix: 4.42.2+
Fix from $1,950 2025-01-13
Visual Access Manager MEDIUM 6.1
CVE-2023-42245

Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via monitor/s_scheduledfile.php.

Fix: 4.42.2+
Fix from $1,600 2025-01-13
Visual Access Manager MEDIUM 5.4
CVE-2023-42243

In Selesta Visual Access Manager < 4.42.2, an authenticated user can access the administrative page /common/vam_Sql.php, which allows for arbitrary S…

Fix: 4.42.2+
Fix from $1,600 2025-01-13
Visual Access Manager MEDIUM 6.5
CVE-2023-50811

An issue discovered in SELESTA Visual Access Manager 4.38.6 allows attackers to modify the “computer” POST parameter related to the ID of a specific …

Mitigation only
Fix from $1,600 2024-03-19
Visual Access Manager CRITICAL 9.8
CVE-2019-19994

An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. It allows blind Command Injection. An attacker without authentica…

Fix: after 4.29.0
Fix from $2,300 2020-02-26
Visual Access Manager HIGH 8.8
CVE-2019-19988

An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. A user with valid credentials is able to create and write XML fil…

Fix: after 4.29.0
Fix from $1,950 2020-02-26
Visual Access Manager HIGH 7.5
CVE-2019-19986

An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. An attacker without authentication is able to execute arbitrary S…

Fix: after 4.29.0
Fix from $1,950 2020-02-26
Visual Access Manager HIGH 7.5
CVE-2019-19989

An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Several PHP pages, and other type of files, are reachable by any …

Fix: after 4.29.0
Fix from $1,950 2020-02-26
Visual Access Manager MEDIUM 6.5
CVE-2019-19987

An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. It allows Cross-Site Request Forgery (CSRF) on any HTML form. An …

Fix: after 4.29.0
Fix from $1,600 2020-02-26
Visual Access Manager MEDIUM 6.5
CVE-2019-19992

An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. A user with valid credentials is able to read XML files on the fi…

Fix: after 4.29.0
Fix from $1,600 2020-02-26
Visual Access Manager MEDIUM 5.4
CVE-2019-19990

An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Multiple Stored Cross-site scripting (XSS) vulnerabilities allow …

Fix: after 4.29.0
Fix from $1,600 2020-02-26
Visual Access Manager MEDIUM 5.4
CVE-2019-19991

An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Multiple Reflected Cross-site scripting (XSS) vulnerabilities all…

Fix: after 4.29.0
Fix from $1,600 2020-02-26
Visual Access Manager MEDIUM 5.3
CVE-2019-19993

An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Several full path disclosure vulnerability were discovered. A use…

Fix: after 4.29.0
Fix from $1,600 2020-02-26