VULNERABILITY INTELLIGENCE

CVE-2023-42240

CVSS score3.8 LOW

EPSS probability0.25%

CISA KEVNot currently listed

Published2025-01-13

Last modified2026-06-17

Description

An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters of /monitor/s_scheduledfile.php.