{"id":"CVE-2025-23114","aliases":["EUVD-2025-3128","GHSA-6j39-893g-q8cf"],"status":"published","title":"A vulnerability in Veeam Updater component allows Man-in-the-Middle attackers to execute...","description":"A vulnerability in Veeam Updater component allows Man-in-the-Middle attackers to execute arbitrary code on the affected server. This issue occurs due to a failure to properly validate TLS certificate.","severity":{"version":"3.0","score":9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00637,"percentile":0.50885,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-295"],"published":"2025-02-05T01:45:03Z","modified":"2026-06-17T08:52:07Z","products":[{"vendor":"veeam","product":"backup for aws"},{"vendor":"veeam","product":"backup for google cloud"},{"vendor":"veeam","product":"backup for microsoft azure"},{"vendor":"veeam","product":"backup for nutanix ahv"},{"vendor":"veeam","product":"backup for oracle linux virtualization manager and red hat virtualization"},{"vendor":"veeam","product":"backup for salesforce"}],"references":[{"url":"https://www.veeam.com/kb4712"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-23114"},{"url":"https://github.com/advisories/GHSA-6j39-893g-q8cf"}],"sources":{"cve":[{"id":"CVE-2025-23114","description":"A vulnerability in Veeam Updater component allows Man-in-the-Middle attackers to execute arbitrary code on the affected server. This issue occurs due to a failure to properly validate TLS certificate.","status":"published","published":"2025-02-05T01:45:03.336Z","modified":"2025-03-13T18:23:04.462Z","cvss":[{"version":"3.0","score":9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T14:32:33.082076Z"}],"euvd":[{"id":"EUVD-2025-3128","description":"A vulnerability in Veeam Updater component allows Man-in-the-Middle attackers to execute arbitrary code on the affected server. This issue occurs due to a failure to properly validate TLS certificate.","status":"published","published":"2025-02-05T01:45:03Z","modified":"2025-03-13T18:23:04Z","cvss":[{"version":"3.0","score":9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:53:04.232984Z"}],"ghsa":[{"id":"GHSA-6j39-893g-q8cf","title":"A vulnerability in Veeam Updater component allows Man-in-the-Middle attackers to execute...","description":"A vulnerability in Veeam Updater component allows Man-in-the-Middle attackers to execute arbitrary code on the affected server. This issue occurs due to a failure to properly validate TLS certificate.","status":"published","published":"2025-02-05T03:32:13Z","modified":"2025-03-13T21:31:17Z","cvss":[{"version":"3.0","score":9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T15:00:16.694376Z"}],"nvd":[{"id":"CVE-2025-23114","description":"A vulnerability in Veeam Updater component allows Man-in-the-Middle attackers to execute arbitrary code on the affected server. This issue occurs due to a failure to properly validate TLS certificate.","status":"published","published":"2025-02-05T02:15:28.61Z","modified":"2026-06-17T08:52:07.273Z","cvss":[{"version":"3.0","score":9,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T14:10:50.916773Z"}]}}