Total 71 security vulnerabilities recorded for veeam software and firmware.
A vulnerability Veeam Backup & Replication allows low-privileged users to control and modify configurations on connected virtual infrastructure hosts....
A vulnerability in Veeam Backup & Replication allows a low-privileged user to start an agent remotely in server mode and obtain credentials, effective...
A vulnerability in Veeam Backup & Replication allows low-privileged users to leak all saved credentials in plaintext. This is achieved by calling a se...
A vulnerability in Veeam Backup & Replication allows a low-privileged user with certain roles to perform remote code execution (RCE) by updating exist...
A vulnerability in Veeam Backup & Replication Enterprise Manager has been identified, which allows attackers to perform authentication bypass. Attacke...
A vulnerability that allows an attacker in possession of the Veeam ONE Agent service account credentials to perform remote code execution on the machi...
An improper access control vulnerability allows low-privileged users to execute code with Administrator privileges remotely....
An incorrect permission assignment vulnerability allows an attacker to modify product configuration files....
An improper access control vulnerability allows an attacker with valid access tokens to access saved credentials....
A Cross-site-scripting (XSS) vulnerability exists in the Reporter Widgets that allows HTML injection....
A vulnerability that allows an attacker to access the NTLM hash of the Veeam Reporter Service service account. This attack requires user interaction a...
An improper certificate validation vulnerability in TLS certificate validation allows an attacker on the same network to intercept sensitive credentia...
A vulnerability that allows a user who has been assigned a low-privileged role within Veeam Backup & Replication to alter Multi-Factor Authentication ...
A path traversal vulnerability allows an attacker with a low-privileged account and local access to the system to perform local privilege escalation (...
A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE)....
A series of related high-severity vulnerabilities, the most notable enabling remote code execution (RCE) as the service account and extraction of sens...
An improper input validation vulnerability that allows a low-privileged user to remotely remove files on the system with permissions equivalent to tho...
Hard-coded JWT secret allows authentication bypass in Veeam Recovery Orchestrator...
An authentication bypass vulnerability in Veeam Agent for Microsoft Windows allows for local privilege escalation....
Veeam Backup Enterprise Manager allows high-privileged users to read backup session logs....
Veeam Backup Enterprise Manager allows high-privileged users to steal NTLM hash of Enterprise manager service account....
Veeam Backup Enterprise Manager allows account takeover via NTLM relay....
Veeam Backup Enterprise Manager allows unauthenticated users to log in as any user to enterprise manager web interface....
Due to an unsafe de-serialization method used by the Veeam Service Provider Console(VSPC) server in communication between the management agent and it...