Veeam
Veeam ONE: vulnerabilidades y CVE
Veeam ONE tiene 12 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 3 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE12
Últimos 12 meses0
Críticas3
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2024-42024 | Alta (8.8) | 1.3% | — | 7 sept 2024 | A vulnerability that allows an attacker in possession of the Veeam ONE Agent service account credentials to perform remote code execution on the machine where the Veeam ONE Agent is installed. |
| CVE-2024-42023 | Alta (8.8) | 0.47% | — | 7 sept 2024 | An improper access control vulnerability allows low-privileged users to execute code with Administrator privileges remotely. |
| CVE-2024-42022 | Media (5.3) | 0.28% | — | 7 sept 2024 | An incorrect permission assignment vulnerability allows an attacker to modify product configuration files. |
| CVE-2024-42021 | Media (6.5) | 0.30% | — | 7 sept 2024 | An improper access control vulnerability allows an attacker with valid access tokens to access saved credentials. |
| CVE-2024-42020 | Media (5.4) | 0.41% | — | 7 sept 2024 | A Cross-site-scripting (XSS) vulnerability exists in the Reporter Widgets that allows HTML injection. |
| CVE-2024-42019 | Alta (8) | 0.54% | — | 7 sept 2024 | A vulnerability that allows an attacker to access the NTLM hash of the Veeam Reporter Service service account. This attack requires user interaction and data collected from Veeam Backup & Replication. |
| CVE-2023-41723 | Media (4.3) | 12% | — | 7 nov 2023 | A vulnerability in Veeam ONE allows a user with the Veeam ONE Read-Only User role to view the Dashboard Schedule. Note: The criticality of this vulnerability is reduced because the user with the Read-Only role is only… |
| CVE-2023-38549 | Media (5.4) | 19% | — | 7 nov 2023 | A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web Client the ability to acquire the NTLM hash of the account used by the Veeam ONE Reporting Service. Note: The criticality of… |
| CVE-2023-38548 | Media (4.3) | 12% | — | 7 nov 2023 | A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web Client the ability to acquire the NTLM hash of the account used by the Veeam ONE Reporting Service. |
| CVE-2023-38547 | Crítica (9.8) | 19% | — | 7 nov 2023 | A vulnerability in Veeam ONE allows an unauthenticated user to gain information about the SQL server connection Veeam ONE uses to access its configuration database. This may lead to remote code execution on the SQL… |
| CVE-2020-10915 | Crítica (9.8) | 87% | — | 22 abr 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of VEEAM One Agent 9.5.4.4587. Authentication is not required to exploit this vulnerability. The specific flaw exists within… |
| CVE-2020-10914 | Crítica (9.8) | 48% | — | 22 abr 2020 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of VEEAM One Agent 9.5.4.4587. Authentication is not required to exploit this vulnerability. The specific flaw exists within… |
Otros productos de Veeam
Veeam Backup & Replication · 42Veeam Service Provider Console · 8Veeam Agent FOR Windows · 3ONE Reporter · 3Recovery Orchestrator · 3ONE Firmware · 2Backup AND Replication · 2Veeam Availability Suite · 1Veeam Backup FOR Google Cloud · 1Agent FOR Microsoft Windows · 1Veeam Software Appliance · 1Availability Orchestrator · 1