Veeam Service Provider Console
10 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-58073 | < 9.3 | A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent andobtain that agent's | CRITICAL 9.5 | 0.3 % | ||
| CVE-2026-58072 | < 9.3 | A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remotecode execu | CRITICAL 9.0 | 0.5 % | ||
| CVE-2026-58071 | < 9.3 | A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access the proxied appliance API asPortal Administ | HIGH 8.2 | 0.4 % | ||
| CVE-2026-58067 | < 9.3 | A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to exhaust host memory and cause adenial of service. | HIGH 8.7 | 0.4 % | ||
| CVE-2026-64635 | ≤ 9.2 | Improper handling of the returnUrl parameter in the Forgot Password function of Veeam Service Provider Console allows an unauthenticated att | MEDIUM 5.3 | 0.3 % | ||
| CVE-2026-32998 | 9 – 9.2 | This vulnerability in Veeam Service Provider Console allows for remote code execution. | CRITICAL 9.4 | 0.5 % | ||
| CVE-2024-42448 | 8.1 | From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is possible to perform Rem | CRITICAL 9.9 | 20 % | ||
| CVE-2024-45206 | 8.0 | A vulnerability in Veeam Service Provider Console has been identified, which allows to perform arbitrary HTTP requests to arbitrary hosts of | MEDIUM 6.5 | 0.2 % | ||
| CVE-2024-42449 | 8.1 | From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is possible to remove arbi | HIGH 7.1 | 6.0 % | ||
| CVE-2024-29212 | 8 ; 7 | Due to an unsafe de-serialization method used by the Veeam Service Provider Console(VSPC) server in communication between the management ag | CRITICAL 9.9 | 1.6 % |