Skip to content
OpenAdvisories

Product · Veeam

One

21 known vulnerabilities.

12 results · Clear filters · Feed

  • High 8.5

    A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disa…

  • High 8.5

    A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter service account.

  • High 8.4

    A vulnerability allowing local privilege escalation to the Reporter service context.

  • High 8.6

    A vulnerability allowing a low-privileged user to inject SQL and extract database contents.

  • High 8.6

    A vulnerability allowing a high-privileged user to execute arbitrary code on the server.

  • High 8.7

    A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host, which can be further levera…

  • High 7.3

    A Cross-site-scripting (XSS) vulnerability exists in the Reporter Widgets that allows HTML injection.

  • High 7.5

    An improper access control vulnerability allows an attacker with valid access tokens to access saved credentials.

  • High 7.5

    An incorrect permission assignment vulnerability allows an attacker to modify product configuration files.

  • High 7.8

    An improper access control vulnerability allows low-privileged users to execute code with Administrator privileges remo…

  • High 7.5
    CVE-2020-15419 EPSS 60%

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Veeam ONE 10.…

  • High 7.5

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Veeam ONE 10.…