Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Veeam_backup_\&_replication
(Veeam)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 20 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2025-06-19 | CVE-2025-24286 | A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code. | Veeam_backup_\&_replication | 4.9 | ||
| 2025-06-19 | CVE-2025-23121 | A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user | Veeam_backup_\&_replication | 8.8 | ||
| 2024-11-07 | CVE-2024-40715 | A vulnerability in Veeam Backup & Replication Enterprise Manager has been identified, which allows attackers to perform authentication bypass. Attackers must be able to perform Man-in-the-Middle (MITM) attack to exploit this vulnerability. | Veeam_backup_\&_replication | N/A | ||
| 2024-05-22 | CVE-2024-29849 | Veeam Backup Enterprise Manager allows unauthenticated users to log in as any user to enterprise manager web interface. | Veeam_backup_\&_replication | N/A | ||
| 2024-05-22 | CVE-2024-29850 | Veeam Backup Enterprise Manager allows account takeover via NTLM relay. | Veeam_backup_\&_replication | N/A | ||
| 2024-05-22 | CVE-2024-29851 | Veeam Backup Enterprise Manager allows high-privileged users to steal NTLM hash of Enterprise manager service account. | Veeam_backup_\&_replication | N/A | ||
| 2024-05-22 | CVE-2024-29852 | Veeam Backup Enterprise Manager allows high-privileged users to read backup session logs. | Veeam_backup_\&_replication | N/A | ||
| 2024-09-07 | CVE-2024-39718 | An improper input validation vulnerability that allows a low-privileged user to remotely remove files on the system with permissions equivalent to those of the service account. | Veeam_backup_\&_replication | 8.1 | ||
| 2024-09-07 | CVE-2024-40710 | A series of related high-severity vulnerabilities, the most notable enabling remote code execution (RCE) as the service account and extraction of sensitive information (savedcredentials and passwords). Exploiting these vulnerabilities requires a user who has been assigned a low-privileged role within Veeam Backup & Replication. | Veeam_backup_\&_replication | 8.8 | ||
| 2024-09-07 | CVE-2024-40712 | A path traversal vulnerability allows an attacker with a low-privileged account and local access to the system to perform local privilege escalation (LPE). | Veeam_backup_\&_replication | 7.8 |