Veeam

Records120All Threatist records

Exploited (KEV)4In CISA KEV

CVSS critical34CVSS 9.0–10.0

CVSS high57CVSS 7.0–8.9

Exploited now

Veeam records in CISA KEV

TI-2024-27107 Veeam Backup and Replication Deserialization Vulnerability CRITICAL 100KEV 2024-10-17 TI-2023-12256 Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability CRITICAL 90KEV 2023-08-22 TI-2022-09843 Veeam Backup & Replication Remote Code Execution Vulnerability CRITICAL 97KEV 2022-12-13 TI-2022-09844 Veeam Backup & Replication Remote Code Execution Vulnerability CRITICAL 100KEV 2022-12-13

Components

Products in the NVD configurations · select one to filter the records

Veeam Backup & Replication 42 records CRITICAL One 12 records HIGH One Reporter 3 records MEDIUM Recovery Orchestrator 3 records MEDIUM Veeam Agent For Windows 3 records LOW One Firmware 2 records HIGH Veeam Service Provider Console 2 records MEDIUM Availability Orchestrator 1 record LOW

Records

2 records in Veeam Service Provider Console · all components

TI-2024-19381 CVE-2024-29212 · GHSA-5h2f-vwh5-pc3g

Deserialization of untrusted data in Veeam Service Provider Console

MEDIUM 46

Due to an unsafe de-serialization method used by the Veeam Service Provider Console(VSPC) server in communication between the management agent and its components, under certain conditions, it is possible to perform Remot…

CVSS 3.0CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01551 Published 2024-05-13 No fix listed CWE-502

TI-2024-30300 CVE-2024-45206 · GHSA-3g63-2rpp-wc2m

Server-side request forgery in Veeam Service Provider Console

LOW 34

A vulnerability in Veeam Service Provider Console has been identified, which allows to perform arbitrary HTTP requests to arbitrary hosts of the network and get information about internal resources.

CVSS 3.0MEDIUM 6.5 Network No auth No interaction EPSS 0.00249 Published 2024-12-04 No fix listed CWE-918

Open these records in search →