VULNERABILITY INTELLIGENCE

CVE-2023-42248

CVSS score6.5 MEDIUM

EPSS probability0.36%

CISA KEVNot currently listed

Published2025-01-13

Last modified2026-06-17

Description

An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can write arbitrary files by manipulating POST parameters of the page "common/vam_Sql.php".