Summary
Ein Angreifer kann mehrere Schwachstellen in Veeam Backup Enterprise Manager ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, um beliebigen Programmcode auszuführen, und um Daten zu manipulieren.
Product
Veeam Backup Enterprise Manager ist eine optionale webbasierte Management- und Reporting-Konsole für Veeam Backup & Replication.
Vulnerabilities 3
-
Critical 9.4
This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the back…
-
Medium 6.1
This vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise Manager master key and…
-
Medium 4.8
This vulnerability in Veeam Backup Enterprise Manager allows an attacker to execute script in the browser of a portal u…
Revision history
-
#1
Initiale Fassung
References
-
Veeam Security Advisory vom 2026-10-06
https://www.veeam.com/kb4934