Skip to content
OpenAdvisories

Product · Veeam

One

21 known vulnerabilities.

One at a glance

Last 12 months
9
Critical · all time
6
Exploited · all time
0
Public exploit · all time
1
New vulnerabilities per month · last 12 months
0 5 10 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 8 vulnerabilities, 2 critical September 2026: 0 vulnerabilities Sep October 2026: 1 vulnerability November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202610
Sep 202600
Aug 202682
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Latest advisories

  • Medium max 8.5
    WID-SEC-2026-4213 1 CVE

    Veeam ONE: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

    Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Veeam ONE ausnutzen, um die Multi-Faktor-Authentifizierung zu umgehen.

    Veeam Windows
  • High max 10.0
    WID-SEC-2026-2656 7 CVEs rev. 3

    Veeam ONE: Mehrere Schwachstellen

    Ein Angreifer kann mehrere Schwachstellen in Veeam ONE ausnutzen, um beliebigen Programmcode auszuführen, vertrauliche Informationen offenzulegen, SQL-Injektionen durchzuführen oder Berechtigungen zu erweitern.

    Veeam Windows
    first Aug 4, 2026
  • High max 9.3
    WID-SEC-2026-3008 1 CVE rev. 2

    Veeam ONE: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen

    Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Veeam ONE ausnutzen, um Sicherheitsvorkehrungen zu umgehen.

    Veeam Windows
    first Aug 25, 2026
  • High max 10.0
    NCSC-2026-0283 6 CVEs

    Kwetsbaarheden in Veeam ONE

    De kwetsbaarheden betreffen meerdere softwarecomponenten van Veeam ONE, waaronder agents en services die met verhoogde privileges draaien, evenals systemen die rapporten delen via gedeelde links en backend databases gebruiken.

    Veeam
  • High max 9.9
    NCSC-2024-0359 17 CVEs 1 exploited rev. 2

    Kwetsbaarheden verholpen in diverse producten van Veeam.

    Veeam heeft kwetsbaarheden verholpen in diverse producten, zoals Backup & Replication, ONE, Service Provider Console en Agent.

    Veeam
    first Sep 6, 2024
All Critical High Medium Low Exploited only Public exploit

21 results · Feed

  • High 8.5
    CVE-2026-107671

    A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disa…

    Veeam One
  • High 8.5
    CVE-2026-64632

    A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter service account.

    Veeam One
  • Critical 9.3
    CVE-2026-65641

    A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account.

    Veeam One
  • Critical 10.0
    CVE-2026-64633 Public exploit

    A vulnerability allowing remote unauthenticated code execution on the agent host.

    Veeam One
  • High 8.4
    CVE-2026-64634

    A vulnerability allowing local privilege escalation to the Reporter service context.

    Veeam One
  • High 8.6
    CVE-2026-64631

    A vulnerability allowing a low-privileged user to inject SQL and extract database contents.

    Veeam One
  • Medium 5.3
    CVE-2026-64630

    A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report link.

    Veeam One
  • High 8.6
    CVE-2026-58074

    A vulnerability allowing a high-privileged user to execute arbitrary code on the server.

    Veeam One
  • High 8.7
    CVE-2026-58075

    A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host, which can be further levera…

    Veeam One
  • High 7.3
    CVE-2024-42020

    A Cross-site-scripting (XSS) vulnerability exists in the Reporter Widgets that allows HTML injection.

    Veeam One
  • High 7.5
    CVE-2024-42021

    An improper access control vulnerability allows an attacker with valid access tokens to access saved credentials.

    Veeam One
  • Critical 9.1
    CVE-2024-42024

    A vulnerability that allows an attacker in possession of the Veeam ONE Agent service account credentials to perform rem…

    Veeam One
  • High 7.5
    CVE-2024-42022

    An incorrect permission assignment vulnerability allows an attacker to modify product configuration files.

    Veeam One
  • Critical 9.0
    CVE-2024-42019

    A vulnerability that allows an attacker to access the NTLM hash of the Veeam Reporter Service service account. This att…

    Veeam One
  • High 7.8
    CVE-2024-42023

    An improper access control vulnerability allows low-privileged users to execute code with Administrator privileges remo…

    Veeam One
  • Medium 4.5
    CVE-2023-38549 EPSS 19%

    A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web Client the ability to acqu…

    Veeam One
  • Critical 9.8
    CVE-2023-38548 EPSS 12%

    A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web Client the ability to acqu…

    Veeam One
  • Critical 9.9
    CVE-2023-38547 EPSS 21%

    A vulnerability in Veeam ONE allows an unauthenticated user to gain information about the SQL server connection Veeam O…

    Veeam One
  • Medium 4.3
    CVE-2023-41723 EPSS 13%

    A vulnerability in Veeam ONE allows a user with the Veeam ONE Read-Only User role to view the Dashboard Schedule. Note:…

    Veeam One
  • High 7.5
    CVE-2020-15419 EPSS 60%

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Veeam ONE 10.…

    Veeam One
  • High 7.5
    CVE-2020-15418

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Veeam ONE 10.…

    Veeam One