VULNERABILITY INTELLIGENCE

CVE-2023-42243

CVSS score5.4 MEDIUM

EPSS probability0.25%

CISA KEVNot currently listed

Published2025-01-13

Last modified2026-06-17

Description

In Selesta Visual Access Manager < 4.42.2, an authenticated user can access the administrative page /common/vam_Sql.php, which allows for arbitrary SQL queries.