Vendor
Veeam
107 known vulnerabilities.
Products
One 21
Backup and Replication 21
Backup and Recovery 14
Backup & Replication 12
Service Provider Console 10
Veeam Service Provider Console 4
Agent for Windows 4
Backup for Microsoft 365 4
Management Pack for Microsoft System Center 3
Recovery Orchestrator 3
Backup for Microsoft Azure 2
Software Appliance 2
One Agent 2
Availability Orchestrator 2
Backup Enterprise Manager 1
Backup for AWS 1
Backup for Google Cloud 1
Backup for Nutanix AHV 1
Backup for Oracle Linux Virtualization Manager and Red Hat Virtualization 1
Backup for Salesforce 1
Nutanix AHV 1
Nutanix KVM 1
Enterprise Manager 1
Backup for Microsoft Windows 1
Agent for Microsoft Windows 1
Disaster Recovery Orchestrator 1
Agent for Linux 1
Backup 0
Management Pack for System Center 0
agent 0
Backup & Replication < 11.0.1.1261 P20220302. 0
veeam_backup_\&_replication 0
ONE < 12.0.1.2591 0
ONE < 11.0.1.1880 0
ONE < 11.0.0.1379 0
Backup & Replication for Google Cloud 1.0 0
Backup & Replication for Google Cloud 3.0 0
54 results · Clear filters · Feed
-
High 8.8
A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (…
-
High 8.7
A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account…
-
High 8.3
A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on t…
-
High 7.3
A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by …
-
High 8.5
A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disa…
-
High 8.3
This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files o…
-
High 8.5
A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter service account.
-
High 8.4
A vulnerability allowing local privilege escalation to the Reporter service context.
-
High 8.6
A vulnerability allowing a low-privileged user to inject SQL and extract database contents.
-
High 8.7
A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to exhaust host memory and cause…
-
High 8.2
A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access the proxied appliance …
-
High 8.6
A vulnerability allowing a high-privileged user to execute arbitrary code on the server.
-
High 8.7
A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host, which can be further levera…
-
High 8.4
A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate…
-
High 7.3CVE-2026-32996 Public exploit
This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.
-
High 8.6
A vulnerability allowing an authenticated user with the Backup Administrator role to write arbitrary files on Linux-bas…
-
High 8.8
A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers.
-
High 7.7
A vulnerability allowing a low-privileged user to extract saved SSH credentials.
-
High 8.8
A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup…
-
High 7.8
This vulnerability allows a Backup or Tape Operator to perform remote code execution (RCE) as root by creating a malici…
-
High 7.3
This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation if a system administrator…
-
High 8.8
A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user.
-
High 7.2CVE-2025-24286 EPSS 19%
A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute…
-
High 7.2
Veeam Backup for Microsoft Azure is vulnerable to Server-Side Request Forgery (SSRF). This may allow an unauthenticated…
-
High 7.7
A vulnerability exists where a low-privileged user can exploit insufficient permissions in credential handling to leak …
-
High 7.0
DLL injection in Veeam Agent for Windows can occur if the system's PATH variable includes insecure locations. When the …
-
High 8.8
A vulnerability in Veeam Backup & Replication allows a low-privileged user with certain roles to perform remote code ex…
-
High 7.7
A vulnerability in Veeam Backup & Replication allows low-privileged users to leak all saved credentials in plaintext. T…
-
High 8.8
A vulnerability in Veeam Backup & Replication platform allows a low-privileged user with a specific role to exploit a m…
-
High 8.8
A vulnerability in Veeam Backup & Replication allows a low-privileged user to start an agent remotely in server mode an…
-
High 7.4
A vulnerability Veeam Backup & Replication allows low-privileged users to control and modify configurations on connecte…
-
High 7.1
From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is po…
-
High 7.7
A vulnerability in Veeam Backup & Replication allows users with certain operator roles to expose saved credentials by l…
-
High 7.1CVE-2024-42455 EPSS 16%
A vulnerability in Veeam Backup & Replication allows a low-privileged user to connect to remoting services and exploit …
-
High 7.7
A vulnerability in Veeam Backup & Replication Enterprise Manager has been identified, which allows attackers to perform…
-
High 8.1
An improper input validation vulnerability that allows a low-privileged user to remotely remove files on the system wit…
-
High 8.5
A code injection vulnerability that allows a low-privileged user with REST API access granted to remotely upload arbitr…
-
High 8.5
A code injection vulnerability can allow a low-privileged user to overwrite files on that VSPC server, which can lead t…
-
High 7.8
A missing authorization vulnerability allows a local low-privileged user on the machine to escalate their privileges to…
-
High 8.8
A series of related high-severity vulnerabilities, the most notable enabling remote code execution (RCE) as the service…