Skip to content
OpenAdvisories

Vendor

Veeam

107 known vulnerabilities.

Products

One 21 Backup and Replication 21 Backup and Recovery 14 Backup & Replication 12 Service Provider Console 10 Veeam Service Provider Console 4 Agent for Windows 4 Backup for Microsoft 365 4 Management Pack for Microsoft System Center 3 Recovery Orchestrator 3 Backup for Microsoft Azure 2 Software Appliance 2 One Agent 2 Availability Orchestrator 2 Backup Enterprise Manager 1 Backup for AWS 1 Backup for Google Cloud 1 Backup for Nutanix AHV 1 Backup for Oracle Linux Virtualization Manager and Red Hat Virtualization 1 Backup for Salesforce 1 Nutanix AHV 1 Nutanix KVM 1 Enterprise Manager 1 Backup for Microsoft Windows 1 Agent for Microsoft Windows 1 Disaster Recovery Orchestrator 1 Agent for Linux 1 Backup 0 Management Pack for System Center 0 agent 0 Backup & Replication < 11.0.1.1261 P20220302. 0 veeam_backup_\&_replication 0 ONE < 12.0.1.2591 0 ONE < 11.0.1.1880 0 ONE < 11.0.0.1379 0 Backup & Replication for Google Cloud 1.0 0 Backup & Replication for Google Cloud 3.0 0
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-64633 Public exploit

    A vulnerability allowing remote unauthenticated code execution on the agent host.

    Veeam One
  • Critical 9.5
    CVE-2026-58073 Public exploit

    A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent a…

    Veeam Service Provider Console
  • Critical 9.4
    CVE-2026-44963 Public exploit

    A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user.

    Veeam Backup and Replication
  • High 7.3
    CVE-2026-32996 Public exploit

    This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.

    Veeam Backup and Replication
  • Critical 9.0
    CVE-2025-59470 Public exploit

    This vulnerability allows a Backup Operator to perform remote code execution (RCE) as the postgres user by sending a ma…

    Veeam Backup and Recovery
  • Critical 9.9
    CVE-2024-42448 Public exploit EPSS 20%

    From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is po…

    Veeam Service Provider Console
  • Critical 9.8
    CVE-2024-40711 Exploited · Ransomware Public exploit EPSS 90%

    A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code exe…

    Veeam Backup and Recovery
    KEV Oct 17, 2024
  • Critical 9.0
    CVE-2024-29855 Public exploit EPSS 22%

    Hard-coded JWT secret allows authentication bypass in Veeam Recovery Orchestrator

    Veeam Recovery Orchestrator
  • Critical 9.8
    CVE-2024-29849 Public exploit EPSS 39%

    Veeam Backup Enterprise Manager allows unauthenticated users to log in as any user to enterprise manager web interface.

    Veeam Backup & Replication
  • Critical 9.8
    CVE-2020-10915 Public exploit EPSS 87%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of VEEAM One Agent 9.5.4…

    Veeam One Agent
  • Critical 9.8
    CVE-2020-10914 Public exploit EPSS 48%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of VEEAM One Agent 9.5.4…

    Veeam One Agent