Vulnerability Details CVE-2023-42236
An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in a GET parameter of /common/ajaxfunction.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 7.4%
CVSS Severity
CVSS v3 Score 3.8
Products affected by CVE-2023-42236
-
cpe:2.3:a:seling:visual_access_manager:4.15.0
-
cpe:2.3:a:seling:visual_access_manager:4.29.0