Veeam One vulnerabilities

• samsung open source one A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor... CVE-2026-107671 8.5 HighOctober 27, 2026
• samsung open source one A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter... CVE-2026-64632 8.5 HighAugust 26, 2026
• samsung open source one A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from... CVE-2026-65641 9.3 CriticalAugust 26, 2026
• samsung open source one A vulnerability allowing local privilege escalation to the Reporter service context. CVE-2026-64634 8.4 HighAugust 4, 2026
• samsung open source one A vulnerability allowing remote unauthenticated code execution on the agent host. CVE-2026-64633 Public exploit 10.0 CriticalAugust 4, 2026
• samsung open source one A vulnerability allowing a low-privileged user to inject SQL and extract database contents. CVE-2026-64631 8.6 HighAugust 4, 2026
• samsung open source one A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a... CVE-2026-64630 5.3 MediumAugust 4, 2026
• samsung open source one A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host, which... CVE-2026-58075 8.7 HighAugust 4, 2026
• samsung open source one A vulnerability allowing a high-privileged user to execute arbitrary code on the server. CVE-2026-58074 8.6 HighAugust 4, 2026
• samsung open source one A vulnerability that allows an attacker in possession of the Veeam ONE Agent service account... CVE-2024-42024 9.1 CriticalSeptember 7, 2024
• samsung open source one An improper access control vulnerability allows low-privileged users to execute code with... CVE-2024-42023 7.8 HighSeptember 7, 2024
• samsung open source one An incorrect permission assignment vulnerability allows an attacker to modify product... CVE-2024-42022 7.5 HighSeptember 7, 2024
• samsung open source one An improper access control vulnerability allows an attacker with valid access tokens to access... CVE-2024-42021 7.5 HighSeptember 7, 2024
• samsung open source one A Cross-site-scripting (XSS) vulnerability exists in the Reporter Widgets that allows HTML... CVE-2024-42020 7.3 HighSeptember 7, 2024
• samsung open source one A vulnerability that allows an attacker to access the NTLM hash of the Veeam Reporter Service... CVE-2024-42019 9.0 CriticalSeptember 7, 2024
• samsung open source one A vulnerability in Veeam ONE allows a user with the Veeam ONE Read-Only User role to view the... CVE-2023-41723 EPSS 12.5% 4.3 MediumNovember 7, 2023
• samsung open source one A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web... CVE-2023-38549 EPSS 19.1% 4.5 MediumNovember 7, 2023
• samsung open source one A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web... CVE-2023-38548 EPSS 11.7% 9.8 CriticalNovember 7, 2023
• samsung open source one A vulnerability in Veeam ONE allows an unauthenticated user to gain information about the SQL... CVE-2023-38547 EPSS 20.7% 9.9 CriticalNovember 7, 2023
• samsung open source one, veeam one firmware +1 more This vulnerability allows remote attackers to disclose sensitive information on affected... CVE-2020-15419 EPSS 59.8% 7.5 HighJuly 28, 2020
• samsung open source one, veeam one firmware +1 more This vulnerability allows remote attackers to disclose sensitive information on affected... CVE-2020-15418 7.5 HighJuly 28, 2020
• veeam one, one agent +1 more This vulnerability allows remote attackers to execute arbitrary code on affected installations of... CVE-2020-10915 Public exploit EPSS 86.7% 9.8 CriticalApril 22, 2020
• veeam one, one agent +1 more This vulnerability allows remote attackers to execute arbitrary code on affected installations of... CVE-2020-10914 Public exploit EPSS 47.9% 9.8 CriticalApril 22, 2020
• veeam one reporter Veeam ONE Reporter 9.5.0.3201 allows XSS via a crafted Description(config) field to addDashboard... CVE-2019-14298 5.4 MediumJuly 27, 2019
• veeam one reporter Veeam ONE Reporter 9.5.0.3201 allows XSS via the Add/Edit Widget with a crafted Caption field to... CVE-2019-14297 5.4 MediumJuly 27, 2019
• veeam one reporter Veeam ONE Reporter 9.5.0.3201 allows CSRF. CVE-2019-11569 Public exploit 8.8 HighMay 6, 2019