Read the docs

Veeam

Records120All Threatist records
Exploited (KEV)4In CISA KEV
CVSS critical34CVSS 9.0–10.0
CVSS high57CVSS 7.0–8.9

Exploited now

Veeam records in CISA KEV
TI-2024-27107 Veeam Backup and Replication Deserialization Vulnerability Priority CRITICAL 100KEV 2024-10-17TI-2023-12256 Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability Priority CRITICAL 90KEV 2023-08-22TI-2022-09843 Veeam Backup & Replication Remote Code Execution Vulnerability Priority CRITICAL 97KEV 2022-12-13TI-2022-09844 Veeam Backup & Replication Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2022-12-13

Components

Products in the NVD configurations · select one to filter the records
Veeam Backup & Replication 42 records CRITICAL One 12 records HIGH One Reporter 3 records MEDIUM Recovery Orchestrator 3 records MEDIUM Veeam Agent For Windows 3 records LOW One Firmware 2 records HIGH Veeam Service Provider Console 2 records MEDIUM Availability Orchestrator 1 record LOW

Records

2 records in One Firmware · all components

TI-2020-12154 CVE-2020-15419 · GHSA-jg82-cxv9-53p9

XML external entity injection in Veeam ONE

Priority HIGH 67

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Veeam ONE 10.0.0.750_20200415.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.59786 Published 2020-07-28 No fix listed CWE-611
TI-2020-12153 CVE-2020-15418 · GHSA-23f3-rj2m-g7gq

XML external entity injection in Veeam ONE

Priority MEDIUM 45

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Veeam ONE 10.0.0.750_20200415.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.09402 Published 2020-07-28 No fix listed CWE-611
Open these records in search →