Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Veeam Component: Veeam Service Provider Console Clear all filters
TI-2024-30300 CVE-2024-45206 · GHSA-3g63-2rpp-wc2m

Server-side request forgery in Veeam Service Provider Console

Priority LOW 34

A vulnerability in Veeam Service Provider Console has been identified, which allows to perform arbitrary HTTP requests to arbitrary hosts of the network and get information about internal resources.

CVSS 3.0MEDIUM 6.5 Network No auth No interaction EPSS 0.00249 Published 2024-12-04 No fix listed CWE-918
TI-2024-19381 CVE-2024-29212 · GHSA-5h2f-vwh5-pc3g

Deserialization of untrusted data in Veeam Service Provider Console

Priority MEDIUM 46

Due to an unsafe de-serialization method used by the Veeam Service Provider Console(VSPC) server in communication between the management agent and its components, under certain conditions, it is possible to perform Remot…

CVSS 3.0CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01551 Published 2024-05-13 No fix listed CWE-502