Skip to contentVeeam vulnerabilities
Newest
- veeam service provider consoleAn authentication bypass vulnerability can allow a low privileged attacker to access the NTLM...CVE-2024-386509.9 Critical
- citrix netscaler agent, netscaler console, netscaler sdx +3 more +5 moreDenial of ServiceCVE-2024-62367.1 High
- veeam recovery orchestratorHard-coded JWT secret allows authentication bypass in Veeam Recovery OrchestratorCVE-2024-29855Public exploitEPSS 21.6%9.0 Critical
- veeam agent, agent for windows +1 moreAn authentication bypass vulnerability in Veeam Agent for Microsoft Windows allows for local...CVE-2024-298537.8 High
- veeam backup enterprise manager, backup & replication, backup \& replication +2 moreVeeam Backup Enterprise Manager allows high-privileged users to read backup session logs.CVE-2024-298522.7 Low
- veeam backup enterprise manager, backup & replication, backup \& replication +2 moreVeeam Backup Enterprise Manager allows high-privileged users to steal NTLM hash of Enterprise...CVE-2024-298517.2 High
- veeam backup enterprise manager, backup & replication, backup \& replication +2 moreVeeam Backup Enterprise Manager allows account takeover via NTLM relay.CVE-2024-298508.8 High
- veeam backup enterprise manager, backup & replication, backup \& replication +2 moreVeeam Backup Enterprise Manager allows unauthenticated users to log in as any user to enterprise...CVE-2024-29849Public exploitEPSS 38.7%9.8 Critical
- veeam service provider consoleDue to an unsafe de-serialization method used by the Veeam Service Provider Console(VSPC) server...CVE-2024-292129.9 Critical
- veeam recovery orchestrator, availability orchestrator +1 moreVulnerability CVE-2024-22022 allows a Veeam Recovery Orchestrator user that has been assigned a...CVE-2024-220228.8 High
- veeam recovery orchestrator, availability orchestrator, disaster recovery orchestrator +2 moreVulnerability CVE-2024-22021 allows a Veeam Recovery Orchestrator user with a low privileged role...CVE-2024-220216.5 Medium
- samsung open source oneA vulnerability in Veeam ONE allows a user with the Veeam ONE Read-Only User role to view the...CVE-2023-41723EPSS 12.5%4.3 Medium
- samsung open source oneA vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web...CVE-2023-38549EPSS 19.1%4.5 Medium
- samsung open source oneA vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web...CVE-2023-38548EPSS 11.7%9.8 Critical
- samsung open source oneA vulnerability in Veeam ONE allows an unauthenticated user to gain information about the SQL...CVE-2023-38547EPSS 20.7%9.9 Critical
- veeam backup & replication, backup \& replication +1 moreVulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the...CVE-2023-27532In KEVPublic exploitEPSS 80.6%7.5 High
- veeam backup for google cloudImproper authentication in Veeam Backup for Google Cloud v1.0 and v3.0 allows attackers to bypass...CVE-2022-435499.8 Critical
- veeam backup and recoveryThis vulnerability allows remote attackers to bypass authentication on affected installations of...CVE-2022-358669.8 Critical
- veeam management packA reflected DOM-Based XSS vulnerability has been discovered in the Help directory of Veeam...CVE-2022-322256.1 Medium
- veeam backup & replication, backup \& replication +1 moreImproper limitation of path names in Veeam Backup & Replication 9.5U3, 9.5U4,10.x, and 11.x...CVE-2022-26500In KEV8.8 High
- veeam backup \& replicationImproper authentication in Veeam Backup & Replication 9.5U3, 9.5U4,10.x and 11.x component used...CVE-2022-265048.8 High
- veeam backup & replication, backup \& replication +1 moreVeeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2).CVE-2022-26501In KEV9.8 Critical
- veeamDeserialization of untrusted data in Veeam Agent for Windows 2.0, 2.1, 2.2, 3.0.2, 4.x, and 5.x...CVE-2022-26503Public exploit7.8 High
- grafana agentInstance config inline secret exposureCVE-2021-41090Fix available6.5 Medium
- veeam backup \& replicationVeeam Backup and Replication 10 before 10.0.1.4854 P20210609 and 11 before 11.0.0.837 P20210507...CVE-2021-359719.8 Critical
- samsung open source one, veeam one firmware +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...CVE-2020-15419EPSS 59.8%7.5 High
- samsung open source one, veeam one firmware +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...CVE-2020-154187.5 High
- veeam availability suite, backup \& replication +1 moreVeeamFSR.sys in Veeam Availability Suite before 10 and Veeam Backup & Replication before 10 has...CVE-2020-155188.8 High
- veeam one, one agent +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...CVE-2020-10915Public exploitEPSS 87.9%9.8 Critical
- veeam one, one agent +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...CVE-2020-10914Public exploitEPSS 47.9%9.8 Critical
- f5 big-ip asm, big-iq, enterprise manager +3 more +5 moreOn BIG-IP ASM 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, BIG-IQ 6.0.0 and...CVE-2019-66659.4 Critical
- veeam one reporterVeeam ONE Reporter 9.5.0.3201 allows XSS via a crafted Description(config) field to addDashboard...CVE-2019-142985.4 Medium
- veeam one reporterVeeam ONE Reporter 9.5.0.3201 allows XSS via the Add/Edit Widget with a crafted Caption field to...CVE-2019-142975.4 Medium
- veeam one reporterVeeam ONE Reporter 9.5.0.3201 allows CSRF.CVE-2019-11569Public exploit8.8 High
- f5 big-iq centralized management, big-iq cloud and orchestration, enterprise manager +4 more +6 moreOn F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.3, 11.6.0-11.6.3.1, or 11.5.1-11.5.6, Enterprise...CVE-2018-55404.4 Medium
- f5 enterprise manager, big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager +12 more +14 moreOn F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1...CVE-2018-55237.2 High
- f5 big-iq centralized management, big-iq cloud and orchestration, iworkflow +16 more +18 moreOn F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.2, or 11.2.1-11.6.3.1, Enterprise Manager 3.1.1, BIG-IQ...CVE-2018-55164.7 Medium
- f5 enterprise manager, iworkflow, big-ip access policy manager +20 more +22 moreAn attacker may be able to cause a denial-of-service (DoS) attack against the sshd component in...CVE-2017-61287.5 High
- veeam backup \& replicationVeeamVixProxy in Veeam Backup & Replication (B&R) before 8.0 update 3 stores local administrator...CVE-2015-57422.1 Low