https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-42250.htmlhttps://patchthecve.com/cve/CVE-2023-42250.htmlWed, 17 Jun 2026 06:23:39 +0000MEDIUM 6.1: Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via /common/autocomplete.php.https://patchthecve.com/cve/CVE-2023-42249.htmlhttps://patchthecve.com/cve/CVE-2023-42249.htmlWed, 17 Jun 2026 06:23:39 +0000MEDIUM 6.1: Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via vam/vam_visits.php.https://patchthecve.com/cve/CVE-2023-42248.htmlhttps://patchthecve.com/cve/CVE-2023-42248.htmlWed, 17 Jun 2026 06:23:39 +0000MEDIUM 6.5: An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can write arbitrary files by manipulating POST parameters of the page "common/vam_Sql.php".https://patchthecve.com/cve/CVE-2023-42247.htmlhttps://patchthecve.com/cve/CVE-2023-42247.htmlWed, 17 Jun 2026 06:23:38 +0000MEDIUM 6.1: Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via monitor/s_monitor_map.php.https://patchthecve.com/cve/CVE-2023-42246.htmlhttps://patchthecve.com/cve/CVE-2023-42246.htmlWed, 17 Jun 2026 06:23:38 +0000MEDIUM 6.1: Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via /vam/vam_ep.php.https://patchthecve.com/cve/CVE-2023-42245.htmlhttps://patchthecve.com/cve/CVE-2023-42245.htmlWed, 17 Jun 2026 06:23:38 +0000MEDIUM 6.1: Selesta Visual Access Manager < 4.42.2 is vulnerable to Cross Site Scripting (XSS) via monitor/s_scheduledfile.php.https://patchthecve.com/cve/CVE-2023-42244.htmlhttps://patchthecve.com/cve/CVE-2023-42244.htmlWed, 17 Jun 2026 06:23:38 +0000HIGH 8.8: An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters of /vam/vam_visits.php.https://patchthecve.com/cve/CVE-2023-42243.htmlhttps://patchthecve.com/cve/CVE-2023-42243.htmlWed, 17 Jun 2026 06:23:38 +0000MEDIUM 5.4: In Selesta Visual Access Manager < 4.42.2, an authenticated user can access the administrative page /common/vam_Sql.php, which allows for arbitrary SQL queries.https://patchthecve.com/cve/CVE-2023-42242.htmlhttps://patchthecve.com/cve/CVE-2023-42242.htmlWed, 17 Jun 2026 06:23:37 +0000LOW 3.8: An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in a GET parameter of /monitor/s_terminal.php.https://patchthecve.com/cve/CVE-2023-42241.htmlhttps://patchthecve.com/cve/CVE-2023-42241.htmlWed, 17 Jun 2026 06:23:37 +0000LOW 3.8: An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters of /vam/vam_anagraphic.php.https://patchthecve.com/cve/CVE-2023-42240.htmlhttps://patchthecve.com/cve/CVE-2023-42240.htmlWed, 17 Jun 2026 06:23:37 +0000LOW 3.8: An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters of /monitor/s_scheduledfile.php.https://patchthecve.com/cve/CVE-2023-42239.htmlhttps://patchthecve.com/cve/CVE-2023-42239.htmlWed, 17 Jun 2026 06:23:37 +0000LOW 3.8: An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters of /vam/vam_ep.php.https://patchthecve.com/cve/CVE-2023-42238.htmlhttps://patchthecve.com/cve/CVE-2023-42238.htmlWed, 17 Jun 2026 06:23:37 +0000LOW 3.8: An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple POST parameters of /vam/vam_eps.php.https://patchthecve.com/cve/CVE-2023-42237.htmlhttps://patchthecve.com/cve/CVE-2023-42237.htmlWed, 17 Jun 2026 06:23:36 +0000LOW 3.8: An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple GET parameters of /vam/vam_i_command.php.https://patchthecve.com/cve/CVE-2023-42236.htmlhttps://patchthecve.com/cve/CVE-2023-42236.htmlWed, 17 Jun 2026 06:23:36 +0000LOW 3.8: An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in a GET parameter of /common/ajaxfunction.php.https://patchthecve.com/cve/CVE-2023-42235.htmlhttps://patchthecve.com/cve/CVE-2023-42235.htmlWed, 17 Jun 2026 06:23:36 +0000LOW 3.8: An issue was discovered in Selesta Visual Access Manager (VAM) prior to 4.42.2. An authenticated attacker can perform SQL Injection in multiple parameters of /monitor/s_normalizedtrans.php.