Veeam

Records120All Threatist records

Exploited (KEV)4In CISA KEV

CVSS critical34CVSS 9.0–10.0

CVSS high57CVSS 7.0–8.9

Exploited now

Veeam records in CISA KEV

TI-2024-27107 Veeam Backup and Replication Deserialization Vulnerability CRITICAL 100KEV 2024-10-17 TI-2023-12256 Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability CRITICAL 90KEV 2023-08-22 TI-2022-09843 Veeam Backup & Replication Remote Code Execution Vulnerability CRITICAL 97KEV 2022-12-13 TI-2022-09844 Veeam Backup & Replication Remote Code Execution Vulnerability CRITICAL 100KEV 2022-12-13

Components

Products in the NVD configurations · select one to filter the records

Veeam Backup & Replication 42 records CRITICAL One 12 records HIGH One Reporter 3 records MEDIUM Recovery Orchestrator 3 records MEDIUM Veeam Agent For Windows 3 records LOW One Firmware 2 records HIGH Veeam Service Provider Console 2 records MEDIUM Availability Orchestrator 1 record LOW

Records

1 record in Availability Orchestrator · all components

TI-2024-14642 CVE-2024-22021 · GHSA-3jx4-3grj-xm5w

Improper authorization in Veeam Recovery Orchestrator

LOW 20

Vulnerability CVE-2024-22021 allows a Veeam Recovery Orchestrator user with a low privileged role (Plan Author) to retrieve plans from a Scope other than the one they are assigned to.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00396 Published 2024-02-07 Fixed in 6, 5 +2 CWE-285

Open these records in search →