Vendor
Veeam
107 known vulnerabilities.
Products
One 21
Backup and Replication 21
Backup and Recovery 14
Backup & Replication 12
Service Provider Console 10
Veeam Service Provider Console 4
Agent for Windows 4
Backup for Microsoft 365 4
Management Pack for Microsoft System Center 3
Recovery Orchestrator 3
Backup for Microsoft Azure 2
Software Appliance 2
One Agent 2
Availability Orchestrator 2
Backup Enterprise Manager 1
Backup for AWS 1
Backup for Google Cloud 1
Backup for Nutanix AHV 1
Backup for Oracle Linux Virtualization Manager and Red Hat Virtualization 1
Backup for Salesforce 1
Nutanix AHV 1
Nutanix KVM 1
Enterprise Manager 1
Backup for Microsoft Windows 1
Agent for Microsoft Windows 1
Disaster Recovery Orchestrator 1
Agent for Linux 1
Backup 0
Management Pack for System Center 0
agent 0
Backup & Replication < 11.0.1.1261 P20220302. 0
veeam_backup_\&_replication 0
ONE < 12.0.1.2591 0
ONE < 11.0.1.1880 0
ONE < 11.0.0.1379 0
Backup & Replication for Google Cloud 1.0 0
Backup & Replication for Google Cloud 3.0 0
107 results · Feed
-
High 7.7
A vulnerability allowing a low-privileged user to extract saved SSH credentials.
-
Critical 10.0
A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.
-
Critical 10.0
A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.
-
Critical 10.0
A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.
-
Critical 9.1
A vulnerability allowing an authenticated user with the Backup Administrator role to perform remote code execution (RCE…
-
High 8.8
A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup…
-
High 7.8
This vulnerability allows a Backup or Tape Operator to perform remote code execution (RCE) as root by creating a malici…
-
Critical 9.0
This vulnerability allows a Backup Administrator to perform remote code execution (RCE) as the postgres user by sending…
-
Critical 9.0
This vulnerability allows a Backup or Tape Operator to write files as root.
-
Critical 9.0CVE-2025-59470 Public exploit
This vulnerability allows a Backup Operator to perform remote code execution (RCE) as the postgres user by sending a ma…
-
Critical 10.0
A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code execution (RCE) on the…
-
High 7.3
This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation if a system administrator…
-
High 8.8
A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user.
-
High 7.2CVE-2025-24286 EPSS 19%
A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute…
-
Critical 9.9CVE-2025-23121 EPSS 26%
A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user
-
Medium 6.1
A vulnerability allowing local system users to modify directory contents, allowing for arbitrary code execution on the …
-
Critical 9.9CVE-2025-23120 EPSS 24%
A vulnerability allowing remote code execution (RCE) for domain users.
-
Critical 9.0
A vulnerability in Veeam Updater component allows Man-in-the-Middle attackers to execute arbitrary code on the affected…
-
High 7.2
Veeam Backup for Microsoft Azure is vulnerable to Server-Side Request Forgery (SSRF). This may allow an unauthenticated…
-
Critical 9.9
From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is po…
-
High 7.7
A vulnerability exists where a low-privileged user can exploit insufficient permissions in credential handling to leak …
-
High 7.0
DLL injection in Veeam Agent for Windows can occur if the system's PATH variable includes insecure locations. When the …
-
Medium 6.5
A vulnerability in Veeam Service Provider Console has been identified, which allows to perform arbitrary HTTP requests …
-
High 8.8
A vulnerability in Veeam Backup & Replication allows a low-privileged user with certain roles to perform remote code ex…
-
High 7.7
A vulnerability in Veeam Backup & Replication allows low-privileged users to leak all saved credentials in plaintext. T…
-
High 8.8
A vulnerability in Veeam Backup & Replication platform allows a low-privileged user with a specific role to exploit a m…
-
High 8.8
A vulnerability in Veeam Backup & Replication allows a low-privileged user to start an agent remotely in server mode an…
-
High 7.4
A vulnerability Veeam Backup & Replication allows low-privileged users to control and modify configurations on connecte…
-
High 7.1
From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is po…
-
High 7.7
A vulnerability in Veeam Backup & Replication allows users with certain operator roles to expose saved credentials by l…
-
High 7.1CVE-2024-42455 EPSS 16%
A vulnerability in Veeam Backup & Replication allows a low-privileged user to connect to remoting services and exploit …
-
High 7.7
A vulnerability in Veeam Backup & Replication Enterprise Manager has been identified, which allows attackers to perform…
-
High 8.1
An improper input validation vulnerability that allows a low-privileged user to remotely remove files on the system wit…
-
Critical 9.9
A code injection vulnerability that permits a low-privileged user to upload arbitrary files to the server, leading to r…
-
High 8.5
A code injection vulnerability that allows a low-privileged user with REST API access granted to remotely upload arbitr…
-
Critical 9.9
An authentication bypass vulnerability can allow a low privileged attacker to access the NTLM hash of service account o…
-
High 8.5
A code injection vulnerability can allow a low-privileged user to overwrite files on that VSPC server, which can lead t…
-
High 7.8
A missing authorization vulnerability allows a local low-privileged user on the machine to escalate their privileges to…
-
High 8.8
A series of related high-severity vulnerabilities, the most notable enabling remote code execution (RCE) as the service…
-
High 7.8
A vulnerability that allows a user who has been assigned a low-privileged role within Veeam Backup & Replication to alt…