3012 matches found
CVE-2024-57967
PVWA Password Vault Web Access in CyberArk Privileged Access Manager Self-Hosted before 14.4 has potentially elevated privileges in LDAP mapping...
CVE-2024-54840
PVWA Password Vault Web Access in CyberArk Privileged Access Manager Self-Hosted before 14.4 does not properly address environment issues that can contribute to Host header injection...
CVE-2024-57967
CVE-2024-57967 affects CyberArk Privileged Access Manager Self-Hosted (PVWA) prior to version 14.4. The issue, described across multiple sources, is a potential elevation of privileges linked to LDAP mapping within PVWA, with a CVSSv3.1 base score of 4.2 (Medium) and a network attack vector (high...
PT-2025-3676 · Cyberark · Cyberark Privileged Access Manager
Name of the Vulnerable Software and Affected Versions: CyberArk Privileged Access Manager Self-Hosted versions prior to 14.4 Description: The issue concerns potentially elevated privileges in LDAP mapping. Recommendations: For versions prior to 14.4, update to version 14.4 or later to resolve the...
CVE-2024-54840
PVWA Password Vault Web Access in CyberArk Privileged Access Manager Self-Hosted before 14.4 does not properly address environment issues that can contribute to Host header injection...
Selesta Visual Access Manager SQL Injection Vulnerability (CNVD-2025-22654)
Selesta Visual Access Manager is a visual access manager from Selesta. A SQL injection vulnerability exists in Selesta Visual Access Manager. The vulnerability stems from the application's lack of validation of externally entered SQL statements and is exploited by an attacker to perform SQL...
Selesta Visual Access Manager vam_ep.php file cross-site scripting vulnerability
Selesta Visual Access Manager is a visual access manager from Selesta. A cross-site scripting vulnerability exists in the Selesta Visual Access Manager vamep.php file, no details of the vulnerability are available at this time...
Selesta Visual Access Manager SQL Injection Vulnerability (CNVD-2025-22657)
Selesta Visual Access Manager is a visual access manager from Selesta. A SQL injection vulnerability exists in Selesta Visual Access Manager. The vulnerability stems from the application's lack of validation of externally entered SQL statements, which can be exploited by an attacker to perform SQ...
Selesta Visual Access Manager SQL Injection Vulnerability (CNVD-2025-22579)
Selesta Visual Access Manager is a visual access manager from Selesta. Selesta Visual Access Manager suffers from a SQL injection vulnerability that can be exploited by an attacker to perform SQL injection in multiple POST parameters of /var/vamanagraph.php...
Selesta Visual Access Manager SQL Injection Vulnerability (CNVD-2025-22315)
Selesta Visual Access Manager is a visual access manager from Selesta. A SQL injection vulnerability exists in Selesta Visual Access Manager, which can be exploited by an attacker to perform SQL injection in multiple parameters of /monitor/snormalizedtrans.php...
Selesta Visual Access Manager Cross-Site Scripting Vulnerability
Selesta Visual Access Manager is a visual access manager from Selesta. A cross-site scripting vulnerability exists in Selesta Visual Access Manager, which stems from the application's lack of effective filtering and escaping of user-supplied data, and for which no detailed vulnerability details a...
Unspecified Vulnerability in Selesta Visual Access Manager (CNVD-2025-22661)
Selesta Visual Access Manager is a visual access manager from Selesta. A security vulnerability exists in Selesta Visual Access Manager, which can be exploited by an attacker to write arbitrary files by manipulating the POST parameter of the page common/vamSql.php...
CVE-2023-42249
Selesta Visual Access Manager 4.42.2 is vulnerable to Cross Site Scripting XSS via vam/vamvisits.php...
CVE-2023-42249
Selesta Visual Access Manager 4.42.2 is vulnerable to Cross Site Scripting XSS via vam/vamvisits.php...
CVE-2023-42250
Selesta Visual Access Manager 4.42.2 is vulnerable to Cross Site Scripting XSS via /common/autocomplete.php...
CVE-2023-42248
An issue was discovered in Selesta Visual Access Manager VAM prior to 4.42.2. An authenticated attacker can write arbitrary files by manipulating POST parameters of the page "common/vamSql.php"...
CVE-2023-42247
Selesta Visual Access Manager 4.42.2 is vulnerable to Cross Site Scripting XSS via monitor/smonitormap.php...
CVE-2023-42246
Selesta Visual Access Manager 4.42.2 is vulnerable to Cross Site Scripting XSS via /vam/vamep.php...