Vulnerabilities (CVE)

Filtered by vendor Seling Subscribe
Filtered by product Visual Access Manager
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-19994 1 Seling 1 Visual Access Manager 2020-02-27 10.0 HIGH 9.8 CRITICAL
An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. It allows blind Command Injection. An attacker without authentication is able to execute arbitrary operating system command by injecting the vulnerable parameter in the PHP Web page /common/vam_monitor_sap.php.