Veeam Backup & Replication
12 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-45204 | 12.2 | A vulnerability exists where a low-privileged user can exploit insufficient permissions in credential handling to leak NTLM hashes of saved | HIGH 7.7 | 0.4 % | ||
| CVE-2024-42457 | 12.2 | A vulnerability in Veeam Backup & Replication allows users with certain operator roles to expose saved credentials by leveraging a combinati | HIGH 7.7 | 0.5 % | ||
| CVE-2024-42456 | 12.2 | A vulnerability in Veeam Backup & Replication platform allows a low-privileged user with a specific role to exploit a method that updates cr | HIGH 8.8 | 0.4 % | ||
| CVE-2024-42455 | 12.2 | A vulnerability in Veeam Backup & Replication allows a low-privileged user to connect to remoting services and exploit insecure deserializat | HIGH 8.1 | 16 % | ||
| CVE-2024-42453 | 12.2 | A vulnerability Veeam Backup & Replication allows low-privileged users to control and modify configurations on connected virtual infrastruct | HIGH 8.1 | 0.3 % | ||
| CVE-2024-42452 | 12.2 | A vulnerability in Veeam Backup & Replication allows a low-privileged user to start an agent remotely in server mode and obtain credentials, | HIGH 8.8 | 0.5 % | ||
| CVE-2024-42451 | 12.2 | A vulnerability in Veeam Backup & Replication allows low-privileged users to leak all saved credentials in plaintext. This is achieved by ca | HIGH 7.7 | 0.3 % | ||
| CVE-2024-40717 | 12.2 | A vulnerability in Veeam Backup & Replication allows a low-privileged user with certain roles to perform remote code execution (RCE) by upda | HIGH 8.8 | 0.8 % | ||
| CVE-2024-29852 | 12.1.2.172 – < 12.1.2.172 | Veeam Backup Enterprise Manager allows high-privileged users to read backup session logs. | LOW 2.7 | 0.5 % | ||
| CVE-2024-29851 | 12.1.2.172 – < 12.1.2.172 | Veeam Backup Enterprise Manager allows high-privileged users to steal NTLM hash of Enterprise manager service account. | HIGH 7.2 | 0.9 % | ||
| CVE-2024-29850 | 12.1.2.172 – < 12.1.2.172 | Veeam Backup Enterprise Manager allows account takeover via NTLM relay. | HIGH 8.8 | 0.8 % | ||
| CVE-2024-29849 | 12.1.2.172 – < 12.1.2.172 ; 11.0.1.1261 P20240304 – < 11.0.1.1261 P20240304 | Veeam Backup Enterprise Manager allows unauthenticated users to log in as any user to enterprise manager web interface. | CRITICAL 9.8 | 39 % |