Skip to content
OpenAdvisories
High WID-SEC-2023-2868 4 CVEs

Veeam ONE: Mehrere Schwachstellen

Published Nov 8, 2023 · Updated Nov 8, 2023 · de-DE

Vendor: Veeam Product: One Product: ONE < 11.0.0.1379 Product: ONE < 11.0.1.1880 Product: ONE < 12.0.1.2591 Platform: Windows

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in Veeam ONE ausnutzen, um beliebigen Code auszuführen oder vertrauliche Informationen offenzulegen.

Product

Veeam One ist eine Lösung für virtuelle Systeme, die diverse Monitoring- und Reporting-Funktionen bereitstellt.

Vulnerabilities 4

  • Critical 9.9
    CVE-2023-38547 EPSS 21%

    A vulnerability in Veeam ONE allows an unauthenticated user to gain information about the SQL server connection Veeam O…

    Veeam One
  • Critical 9.8
    CVE-2023-38548 EPSS 12%

    A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web Client the ability to acqu…

    Veeam One
  • Medium 4.5
    CVE-2023-38549 EPSS 19%

    A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web Client the ability to acqu…

    Veeam One
  • Medium 4.3
    CVE-2023-41723 EPSS 13%

    A vulnerability in Veeam ONE allows a user with the Veeam ONE Read-Only User role to view the Dashboard Schedule. Note:…

    Veeam One

Revision history

  1. #1

    Initiale Fassung

References