5.3
CVSSv3

CVE-2019-19993

Published: 26/02/2020 Updated: 27/02/2020
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

An issue exists in Selesta Visual Access Manager (VAM) 4.15.0 up to and including 4.29. Several full path disclosure vulnerability were discovered. A user, even with no authentication, may simply send arbitrary content to the vulnerable pages to generate error messages that expose some full paths.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

seling visual access manager