Read the docs

Veeam

Records120All Threatist records
Exploited (KEV)4In CISA KEV
CVSS critical34CVSS 9.0–10.0
CVSS high57CVSS 7.0–8.9

Exploited now

Veeam records in CISA KEV
TI-2024-27107 Veeam Backup and Replication Deserialization Vulnerability Priority CRITICAL 100KEV 2024-10-17TI-2023-12256 Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability Priority CRITICAL 90KEV 2023-08-22TI-2022-09843 Veeam Backup & Replication Remote Code Execution Vulnerability Priority CRITICAL 97KEV 2022-12-13TI-2022-09844 Veeam Backup & Replication Remote Code Execution Vulnerability Priority CRITICAL 100KEV 2022-12-13

Components

Products in the NVD configurations · select one to filter the records
Veeam Backup & Replication 42 records CRITICAL One 12 records HIGH One Reporter 3 records MEDIUM Recovery Orchestrator 3 records MEDIUM Veeam Agent For Windows 3 records LOW One Firmware 2 records HIGH Veeam Service Provider Console 2 records MEDIUM Availability Orchestrator 1 record LOW

Records

3 records in Veeam Agent For Windows · all components

TI-2025-31110 CVE-2025-48982 · GHSA-wv6c-g43h-2hgj

Improper privilege management in Veeam Agent for Microsoft Windows

Priority LOW 35

This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation if a system administrator is tricked into restoring a malicious file.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00177 Published 2025-10-30 No fix listed CWE-269
TI-2024-30301 CVE-2024-45207 · GHSA-69h8-2gjf-xq29

Untrusted search path in Veeam Agent for Windows

Priority LOW 32

DLL injection in Veeam Agent for Windows can occur if the system's PATH variable includes insecure locations.

CVSS 3.0HIGH 7.0 Local Low privileges No interaction EPSS 0.00176 Published 2024-12-04 No fix listed CWE-426
Open these records in search →