Seling / Visual Access Manager
26 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2023-42250 | Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via /common/autocomplete.php. | MEDIUM | 6.1 | Jan 13, 2025 |
| CVE-2023-42249 | Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via vam/vam_visits.php. | MEDIUM | 6.1 | Jan 13, 2025 |
| CVE-2023-42248 | An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can write arbitrary files by manipulating POST parame… | MEDIUM | 6.5 | Jan 13, 2025 |
| CVE-2023-42247 | Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via monitor/s_monitor_map.php. | MEDIUM | 6.1 | Jan 13, 2025 |
| CVE-2023-42246 | Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via /vam/vam_ep.php. | MEDIUM | 6.1 | Jan 13, 2025 |
| CVE-2023-42245 | Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via monitor/s_scheduledfile.php. | MEDIUM | 6.1 | Jan 13, 2025 |
| CVE-2023-42244 | An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters… | HIGH | 8.8 | Jan 13, 2025 |
| CVE-2023-42243 | In Selesta Visual Access Manager < 4.42.2, an authenticated user can access the administrative page /common/vam_Sql.php, which allows for arbitrary SQL queries. | MEDIUM | 5.4 | Jan 13, 2025 |
| CVE-2023-42242 | An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in a GET parameter of /moni… | LOW | 3.8 | Jan 13, 2025 |
| CVE-2023-42241 | An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters… | LOW | 3.8 | Jan 13, 2025 |
| CVE-2023-42240 | An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters… | LOW | 3.8 | Jan 13, 2025 |
| CVE-2023-42239 | An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters… | LOW | 3.8 | Jan 13, 2025 |
| CVE-2023-42238 | An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters… | LOW | 3.8 | Jan 13, 2025 |
| CVE-2023-42237 | An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple GET parameters… | LOW | 3.8 | Jan 13, 2025 |
| CVE-2023-42236 | An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in a GET parameter of /comm… | LOW | 3.8 | Jan 13, 2025 |
| CVE-2023-42235 | An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple parameters of /… | LOW | 3.8 | Jan 13, 2025 |
| CVE-2023-50811 | An issue discovered in SELESTA Visual Access Manager 4.38.6 allows attackers to modify the “computer” POST parameter related to the ID of a specific reception… | MEDIUM | 6.5 | Mar 19, 2024 |
| CVE-2019-19986 | An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. An attacker without authentication is able to execute arbitrary SQL SELECT… | HIGH | 7.5 | Feb 26, 2020 |
| CVE-2019-19987 | An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. It allows Cross-Site Request Forgery (CSRF) on any HTML form. An attacker c… | MEDIUM | 6.5 | Feb 26, 2020 |
| CVE-2019-19988 | An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. A user with valid credentials is able to create and write XML files on the… | HIGH | 8.8 | Feb 26, 2020 |
| CVE-2019-19989 | An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Several PHP pages, and other type of files, are reachable by any user witho… | HIGH | 7.5 | Feb 26, 2020 |
| CVE-2019-19990 | An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Multiple Stored Cross-site scripting (XSS) vulnerabilities allow remote aut… | MEDIUM | 5.4 | Feb 26, 2020 |
| CVE-2019-19991 | An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Multiple Reflected Cross-site scripting (XSS) vulnerabilities allow remote… | MEDIUM | 5.4 | Feb 26, 2020 |
| CVE-2019-19992 | An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. A user with valid credentials is able to read XML files on the filesystem v… | MEDIUM | 6.5 | Feb 26, 2020 |
| CVE-2019-19993 | An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Several full path disclosure vulnerability were discovered. A user, even wi… | MEDIUM | 5.3 | Feb 26, 2020 |
Showing 1 to 25 of 26 CVEs