seling records
26 published records for vendor seling.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')11
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')1
- CWE-20 Improper Input Validation1
The weakness classes this vendor ships most often: where to look.
CWEAll records
26 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2019-19994No exploit | An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.seling · visual access manager · CWE-78 | Critical9.8 | — | 4.8% | Feb 26, 2020 |
35Monitor | CVE-2019-19988No exploit | An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.seling · visual access manager · CWE-787 | High8.8 | — | 1.5% | Feb 26, 2020 |
35Monitor | CVE-2023-42244No exploit | An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2.seling · visual access manager · CWE-89 | High8.8 | — | 0.4% | Jan 13, 2025 |
30Monitor | CVE-2019-19989No exploit | An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.seling · visual access manager · CWE-862 | High7.5 | — | 1.3% | Feb 26, 2020 |
30Monitor | CVE-2019-19986No exploit | An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.seling · visual access manager · CWE-89 | High7.5 | — | 1.3% | Feb 26, 2020 |
26Monitor | CVE-2019-19992No exploit | An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.seling · visual access manager · CWE-20 | Medium6.5 | — | 1.1% | Feb 26, 2020 |
26Monitor | CVE-2019-19987No exploit | An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.seling · visual access manager · CWE-352 | Medium6.5 | — | 0.5% | Feb 26, 2020 |
26Monitor | CVE-2023-50811No exploit | An issue discovered in SELESTA Visual Access Manager 4.38.6 allows attackers to modify the “computer” POST parameter related to the ID of a seling · visual access manager · CWE-444 | Medium6.5 | — | 0.5% | Mar 19, 2024 |
26Monitor | CVE-2023-42248No exploit | An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2.seling · visual access manager · CWE-434 | Medium6.5 | — | 0.4% | Jan 13, 2025 |
24Monitor | CVE-2023-42250No exploit | Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via /common/autocomplete.php.seling · visual access manager · CWE-79 | Medium6.1 | — | 0.2% | Jan 13, 2025 |
24Monitor | CVE-2023-42245No exploit | Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via monitor/s_scheduledfile.php.seling · visual access manager · CWE-79 | Medium6.1 | — | 0.2% | Jan 13, 2025 |
24Monitor | CVE-2023-42249No exploit | Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via vam/vam_visits.php.seling · visual access manager · CWE-79 | Medium6.1 | — | 0.2% | Jan 13, 2025 |
24Monitor | CVE-2023-42246No exploit | Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via /vam/vam_ep.php.seling · visual access manager · CWE-79 | Medium6.1 | — | 0.2% | Jan 13, 2025 |
24Monitor | CVE-2023-42247No exploit | Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via monitor/s_monitor_map.php.seling · visual access manager · CWE-79 | Medium6.1 | — | 0.2% | Jan 13, 2025 |
21Monitor | CVE-2019-19993No exploit | An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.seling · visual access manager · CWE-209 | Medium5.3 | — | 1.2% | Feb 26, 2020 |
21Monitor | CVE-2019-19990No exploit | An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.seling · visual access manager · CWE-79 | Medium5.4 | — | 0.9% | Feb 26, 2020 |
21Monitor | CVE-2019-19991No exploit | An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.seling · visual access manager · CWE-79 | Medium5.4 | — | 0.9% | Feb 26, 2020 |
21Monitor | CVE-2023-42243No exploit | In Selesta Visual Access Manager < 4.42.2, an authenticated user can access the administrative page /common/vam_Sql.php, which allows for arseling · visual access manager · CWE-89 | Medium5.4 | — | 0.2% | Jan 13, 2025 |
15Monitor | CVE-2023-42235No exploit | An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2.seling · visual access manager · CWE-89 | Low3.8 | — | 0.3% | Jan 13, 2025 |
15Monitor | CVE-2023-42242No exploit | An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2.seling · visual access manager · CWE-89 | Low3.8 | — | 0.3% | Jan 13, 2025 |
15Monitor | CVE-2023-42239No exploit | An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2.seling · visual access manager · CWE-89 | Low3.8 | — | 0.3% | Jan 13, 2025 |
15Monitor | CVE-2023-42238No exploit | An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2.seling · visual access manager · CWE-89 | Low3.8 | — | 0.3% | Jan 13, 2025 |
15Monitor | CVE-2023-42236No exploit | An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2.seling · visual access manager · CWE-89 | Low3.8 | — | 0.3% | Jan 13, 2025 |
15Monitor | CVE-2023-42240No exploit | An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2.seling · visual access manager · CWE-89 | Low3.8 | — | 0.2% | Jan 13, 2025 |
15Monitor | CVE-2023-42237No exploit | An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2.seling · visual access manager · CWE-89 | Low3.8 | — | 0.2% | Jan 13, 2025 |
- CVE-2019-1999440Plan
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.
CriticalCVSS 9.8No exploitEPSS 5%seling · visual access managerFeb 26, 2020
- CVE-2019-1998835Monitor
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.
HighCVSS 8.8No exploitEPSS 1%seling · visual access managerFeb 26, 2020
- CVE-2023-4224435Monitor
An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2.
HighCVSS 8.8No exploitEPSS 0%seling · visual access managerJan 13, 2025
- CVE-2019-1998930Monitor
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.
HighCVSS 7.5No exploitEPSS 1%seling · visual access managerFeb 26, 2020
- CVE-2019-1998630Monitor
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.
HighCVSS 7.5No exploitEPSS 1%seling · visual access managerFeb 26, 2020
- CVE-2019-1999226Monitor
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.
MediumCVSS 6.5No exploitEPSS 1%seling · visual access managerFeb 26, 2020
- CVE-2019-1998726Monitor
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.
MediumCVSS 6.5No exploitEPSS 1%seling · visual access managerFeb 26, 2020
- CVE-2023-5081126Monitor
An issue discovered in SELESTA Visual Access Manager 4.38.6 allows attackers to modify the “computer” POST parameter related to the ID of a
MediumCVSS 6.5No exploitEPSS 0%seling · visual access managerMar 19, 2024
- CVE-2023-4224826Monitor
An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2.
MediumCVSS 6.5No exploitEPSS 0%seling · visual access managerJan 13, 2025
- CVE-2023-4225024Monitor
Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via /common/autocomplete.php.
MediumCVSS 6.1No exploitEPSS 0%seling · visual access managerJan 13, 2025
- CVE-2023-4224524Monitor
Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via monitor/s_scheduledfile.php.
MediumCVSS 6.1No exploitEPSS 0%seling · visual access managerJan 13, 2025
- CVE-2023-4224924Monitor
Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via vam/vam_visits.php.
MediumCVSS 6.1No exploitEPSS 0%seling · visual access managerJan 13, 2025
- CVE-2023-4224624Monitor
Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via /vam/vam_ep.php.
MediumCVSS 6.1No exploitEPSS 0%seling · visual access managerJan 13, 2025
- CVE-2023-4224724Monitor
Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via monitor/s_monitor_map.php.
MediumCVSS 6.1No exploitEPSS 0%seling · visual access managerJan 13, 2025
- CVE-2019-1999321Monitor
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.
MediumCVSS 5.3No exploitEPSS 1%seling · visual access managerFeb 26, 2020
- CVE-2019-1999021Monitor
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.
MediumCVSS 5.4No exploitEPSS 1%seling · visual access managerFeb 26, 2020
- CVE-2019-1999121Monitor
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29.
MediumCVSS 5.4No exploitEPSS 1%seling · visual access managerFeb 26, 2020
- CVE-2023-4224321Monitor
In Selesta Visual Access Manager < 4.42.2, an authenticated user can access the administrative page /common/vam_Sql.php, which allows for ar
MediumCVSS 5.4No exploitEPSS 0%seling · visual access managerJan 13, 2025
- CVE-2023-4223515Monitor
An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2.
LowCVSS 3.8No exploitEPSS 0%seling · visual access managerJan 13, 2025
- CVE-2023-4224215Monitor
An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2.
LowCVSS 3.8No exploitEPSS 0%seling · visual access managerJan 13, 2025
- CVE-2023-4223915Monitor
An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2.
LowCVSS 3.8No exploitEPSS 0%seling · visual access managerJan 13, 2025
- CVE-2023-4223815Monitor
An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2.
LowCVSS 3.8No exploitEPSS 0%seling · visual access managerJan 13, 2025
- CVE-2023-4223615Monitor
An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2.
LowCVSS 3.8No exploitEPSS 0%seling · visual access managerJan 13, 2025
- CVE-2023-4224015Monitor
An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2.
LowCVSS 3.8No exploitEPSS 0%seling · visual access managerJan 13, 2025
- CVE-2023-4223715Monitor
An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2.
LowCVSS 3.8No exploitEPSS 0%seling · visual access managerJan 13, 2025