Veeam

17 results · Clear filters · Feed

• Medium 4.3
  CVE-2025-64394

  A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the install…

  Veeam Backup for Microsoft 365
  Oct 27, 2026
• Medium 5.9
  CVE-2026-108140

  A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a back…

  Veeam Backup and Replication
  Oct 27, 2026
• Medium 5.9
  CVE-2026-108141

  A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a back…

  Veeam Backup and Replication
  Oct 27, 2026
• Medium 6.9
  CVE-2026-106078

  A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token a…

  Veeam Backup for Microsoft 365
  Oct 27, 2026
• Medium 4.1
  CVE-2025-64391

  This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write file…

  Veeam Agent for Windows Windows
  Oct 7, 2026
• Medium 4.8
  CVE-2025-64392

  This vulnerability in Veeam Backup Enterprise Manager allows an attacker to execute script in the browser of a portal u…

  Veeam Backup Enterprise Manager
  Oct 7, 2026
• Medium 6.1
  CVE-2026-93026

  This vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise Manager master key and…

  Veeam Backup and Replication
  Oct 7, 2026
• Medium 6.8
  CVE-2026-58068

  This vulnerability in Veeam Agent for Microsoft Windows allows any local user to terminate arbitrary processes on the s…

  Veeam Agent for Windows Windows
  Oct 7, 2026
• Medium 6.8
  CVE-2026-58070

  A vulnerability that records guest OS processing credentials in cleartext in a support log on the guest, allowing a use…

  Veeam Backup and Replication
  Aug 26, 2026
• Medium 5.3
  CVE-2026-64630

  A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link.

  Veeam One
  Aug 4, 2026
• Medium 5.3
  CVE-2026-64635

  Improper handling of the returnUrl parameter in the Forgot Password function of Veeam Service Provider Console allows a…

  Veeam Service Provider Console
  Jul 30, 2026
• Medium 6.7
  CVE-2026-21709

  A vulnerability allowing a local attacker with administrator privileges to bypass Windows Driver Signature Enforcement.

  Veeam Backup and Replication Software Appliance
  Apr 17, 2026
• Medium 6.1
  CVE-2025-24287

  A vulnerability allowing local system users to modify directory contents, allowing for arbitrary code execution on the …

  Veeam Backup for Microsoft Windows Windows
  Jun 18, 2025
• Medium 6.5
  CVE-2024-45206

  A vulnerability in Veeam Service Provider Console has been identified, which allows to perform arbitrary HTTP requests …

  Veeam Service Provider Console
  Dec 4, 2024
• Medium 6.5
  CVE-2024-22021

  Vulnerability CVE-2024-22021 allows a Veeam Recovery Orchestrator user with a low privileged role (Plan Author) to retr…

  Veeam Recovery Orchestrator Availability Orchestrator Disaster Recovery Orchestrator
  Feb 7, 2024
• Medium 4.5
  CVE-2023-38549 EPSS 19%

  A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web Client the ability to acqu…

  Veeam One
  Nov 7, 2023
• Medium 4.3
  CVE-2023-41723 EPSS 13%

  A vulnerability in Veeam ONE allows a user with the Veeam ONE Read-Only User role to view the Dashboard Schedule. Note:…

  Veeam One
  Nov 7, 2023