Read the docs

Veeam

Records120All Threatist records
Exploited (KEV)4In CISA KEV
CVSS critical34CVSS 9.0–10.0
CVSS high57CVSS 7.0–8.9

Exploited now

Veeam records in CISA KEV
TI-2024-27107 Veeam Backup and Replication Deserialization Vulnerability Priority CRITICAL 100KEV 2024-10-17TI-2023-12256 Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability Priority CRITICAL 90KEV 2023-08-22TI-2022-09843 Veeam Backup & Replication Remote Code Execution Vulnerability Priority CRITICAL 97KEV 2022-12-13TI-2022-09844 Veeam Backup & Replication Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2022-12-13

Components

Products in the NVD configurations · select one to filter the records
Veeam Backup & Replication 42 records CRITICAL One 12 records HIGH One Reporter 3 records MEDIUM Recovery Orchestrator 3 records MEDIUM Veeam Agent For Windows 3 records LOW One Firmware 2 records HIGH Veeam Service Provider Console 2 records MEDIUM Availability Orchestrator 1 record LOW

Records

3 records in Recovery Orchestrator · all components

TI-2024-14643 CVE-2024-22022 · GHSA-ccx2-385m-5g4m

Information disclosure in Veeam Recovery Orchestrator

Priority LOW 39

Vulnerability CVE-2024-22022 allows a Veeam Recovery Orchestrator user that has been assigned a low-privileged role to access the NTLM hash of the service account used by the Veeam Orchestrator Server Service.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00701 Published 2024-02-07 Fixed in 6, 5 +2 CWE-200
TI-2024-14642 CVE-2024-22021 · GHSA-3jx4-3grj-xm5w

Improper authorization in Veeam Recovery Orchestrator

Priority LOW 20

Vulnerability CVE-2024-22021 allows a Veeam Recovery Orchestrator user with a low privileged role (Plan Author) to retrieve plans from a Scope other than the one they are assigned to.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00396 Published 2024-02-07 Fixed in 6, 5 +2 CWE-285
Open these records in search →