Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Priority MEDIUM 42

A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remotecode execution.

CVSS 4.0CRITICAL 9.0 Network Low privileges No interaction EPSS 0.00533 Published 2026-08-04 Fixed in 9.3 CWE-22
Priority MEDIUM 43

A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent andobtain that agent's credentials.

CVSS 4.0CRITICAL 9.5 Network No auth No interaction EPSS 0.00322 Published 2026-08-04 Fixed in 9.3 CWE-288
Priority LOW 36

A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access the proxied appliance API asPortal Administrator during a short window after an administrator session begins.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00419 Published 2026-08-04 Fixed in 9.3 CWE-306