Priority LOW 27
Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via /common/autocomplete.php.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00239 · Published 2025-01-13 · No fix listed CWE-79
Priority LOW 27
Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via vam/vam_visits.php.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00239 · Published 2025-01-13 · No fix listed CWE-79
Priority LOW 31
An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2.
CVSS 3.1MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.00362 · Published 2025-01-13 · No fix listed CWE-434
Priority LOW 27
Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via monitor/s_monitor_map.php.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00239 · Published 2025-01-13 · No fix listed CWE-79
Priority LOW 27
Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via /vam/vam_ep.php.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00239 · Published 2025-01-13 · No fix listed CWE-79
Priority LOW 27
Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via monitor/s_scheduledfile.php.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00239 · Published 2025-01-13 · No fix listed CWE-79
Priority MEDIUM 40
An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00393 · Published 2025-01-13 · No fix listed CWE-89
Priority LOW 24
In Selesta Visual Access Manager < 4.42.2, an authenticated user can access the administrative page /common/vam_Sql.php, which allows for arbitrary SQL queries.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00246 · Published 2025-01-13 · No fix listed CWE-89
Priority LOW 18
An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2.
CVSS 3.1LOW 3.8· Network · High privileges · No interaction · EPSS 0.0033 · Published 2025-01-13 · No fix listed CWE-89
Priority LOW 18
An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2.
CVSS 3.1LOW 3.8· Network · High privileges · No interaction · EPSS 0.00248 · Published 2025-01-13 · No fix listed CWE-89
Priority LOW 18
An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2.
CVSS 3.1LOW 3.8· Network · High privileges · No interaction · EPSS 0.00248 · Published 2025-01-13 · No fix listed CWE-89
Priority LOW 18
An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2.
CVSS 3.1LOW 3.8· Network · High privileges · No interaction · EPSS 0.0033 · Published 2025-01-13 · No fix listed CWE-89
Priority LOW 18
An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2.
CVSS 3.1LOW 3.8· Network · High privileges · No interaction · EPSS 0.0033 · Published 2025-01-13 · No fix listed CWE-89
Priority LOW 18
An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2.
CVSS 3.1LOW 3.8· Network · High privileges · No interaction · EPSS 0.00248 · Published 2025-01-13 · No fix listed CWE-89
Priority LOW 18
An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2.
CVSS 3.1LOW 3.8· Network · High privileges · No interaction · EPSS 0.0033 · Published 2025-01-13 · No fix listed CWE-89
Priority LOW 18
An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2.
CVSS 3.1LOW 3.8· Network · High privileges · No interaction · EPSS 0.0033 · Published 2025-01-13 · No fix listed CWE-89
Priority LOW 29
An issue discovered in SELESTA Visual Access Manager 4.38.6 allows attackers to modify the “computer” POST parameter related to the ID of a specific reception by POST HTTP request interception.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00453 · Published 2024-03-19 · No fix listed CWE-444
Priority LOW 36
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01334 · Published 2020-02-26 · No fix listed CWE-89
Priority LOW 30
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00546 · Published 2020-02-26 · No fix listed CWE-352
Priority MEDIUM 41
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01462 · Published 2020-02-26 · No fix listed CWE-787
Priority LOW 36
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01341 · Published 2020-02-26 · No fix listed CWE-862
Priority LOW 26
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00856 · Published 2020-02-26 · No fix listed CWE-79
Priority LOW 26
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00856 · Published 2020-02-26 · No fix listed CWE-79
Priority LOW 31
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01123 · Published 2020-02-26 · No fix listed CWE-20
Priority LOW 27
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01243 · Published 2020-02-26 · No fix listed CWE-209
Load more
THREATIST.IORead the docs