visual access manager vulnerabilities and fixes

Q: How do I fix visual access manager vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Q: Is visual access manager being exploited right now?

None of the tracked visual access manager CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Q: Which visual access manager CVE should I patch first?

CVE-2023-42244 currently ranks highest (39/100): An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2.

Recent CVEs affecting visual access manager, with upgrade or downgrade steps. 16 tracked.

Also searched as: visualaccessmanager.

visual access manager has 16 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 16. Most recent: 2025-01-13. Highest priority: CVE-2023-42244 (score 39/100).

CVE-2023-42250 MEDIUM 6.1 UPGRADE Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via /common/autocomplete.ph
CVE-2023-42249 MEDIUM 6.1 UPGRADE Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via vam/vam_visits.php.
CVE-2023-42248 MEDIUM 6.5 UPGRADE An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2
CVE-2023-42247 MEDIUM 6.1 UPGRADE Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via monitor/s_monitor_map.p
CVE-2023-42246 MEDIUM 6.1 UPGRADE Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via /vam/vam_ep.php.
CVE-2023-42245 MEDIUM 6.1 UPGRADE Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via monitor/s_scheduledfile
CVE-2023-42244 HIGH 8.8 UPGRADE An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2
CVE-2023-42243 MEDIUM 5.4 UPGRADE In Selesta Visual Access Manager < 4.42.2, an authenticated user can access the administrative page /common/va
CVE-2023-42242 LOW 3.8 UPGRADE An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2
CVE-2023-42241 LOW 3.8 UPGRADE An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2
CVE-2023-42240 LOW 3.8 UPGRADE An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2
CVE-2023-42239 LOW 3.8 UPGRADE An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2
CVE-2023-42238 LOW 3.8 UPGRADE An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2
CVE-2023-42237 LOW 3.8 UPGRADE An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2
CVE-2023-42236 LOW 3.8 UPGRADE An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2
CVE-2023-42235 LOW 3.8 UPGRADE An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2

FAQ

How do I fix visual access manager vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is visual access manager being exploited right now?

None of the tracked visual access manager CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which visual access manager CVE should I patch first?

CVE-2023-42244 currently ranks highest (39/100): An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2.

RSS feed for visual access manager · ← Back to latest CVEs